{"id":362794,"url":"https://github.com/hibernate/hibernate-orm","last_synced_at":"2026-06-20T07:30:28.586Z","repository":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2026-06-10T23:15:27.000Z","size":353266,"stargazers_count":6438,"open_issues_count":136,"forks_count":3762,"subscribers_count":295,"default_branch":"main","last_synced_at":"2026-06-11T03:05:12.302Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"hibernate","custom":["https://opencollective.com/commonhaus-foundation"]}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2026-06-10T23:01:46.000Z","dependencies_parsed_at":"2026-03-11T07:02:06.552Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":516,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34520433,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-19T02:00:06.005Z","response_time":61,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"hibernate","custom":["https://opencollective.com/commonhaus-foundation"]}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/hibernate","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"packages":[{"id":11771957,"name":"org.hibernate.orm:hibernate-jfr","ecosystem":"maven","description":"Integration for JDK JFR into Hibernate O/RM","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":141,"first_release_published_at":"2023-11-23T14:26:58.000Z","latest_release_published_at":"2026-04-20T15:33:40.000Z","latest_release_number":"7.3.2.Final","last_synced_at":"2026-06-18T08:15:59.961Z","created_at":"2025-06-07T21:10:58.184Z","updated_at":"2026-06-18T08:15:59.962Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-jfr/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-jfr/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:11.932Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":34.026626466074966,"dependent_packages_count":48.64554336343237,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":41.33608491475367},"purl":"pkg:maven/org.hibernate.orm/hibernate-jfr","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-jfr","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-jfr","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-jfr/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jfr/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jfr/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jfr/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jfr/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jfr/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jfr/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932081,"name":"org.hibernate.orm:hibernate-orm-jbossmodules","ecosystem":"maven","description":"Feature Pack of Hibernate ORM modules for WildFly 17","homepage":"http://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":4,"first_release_published_at":"2018-12-06T17:07:03.000Z","latest_release_published_at":"2019-12-20T13:52:04.000Z","latest_release_number":"6.0.0.Alpha4","last_synced_at":"2026-06-15T04:21:24.032Z","created_at":"2022-07-27T03:09:51.992Z","updated_at":"2026-06-15T04:21:24.032Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-orm-jbossmodules/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-orm-jbossmodules/","metadata":{},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:14.631Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":1,"rankings":{"downloads":null,"dependent_repos_count":20.645187144345595,"dependent_packages_count":49.884988378616654,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":19.242005289733108},"purl":"pkg:maven/org.hibernate.orm/hibernate-orm-jbossmodules","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-orm-jbossmodules","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-orm-jbossmodules","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-orm-jbossmodules/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-orm-jbossmodules/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-orm-jbossmodules/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-orm-jbossmodules/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-orm-jbossmodules/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-orm-jbossmodules/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-orm-jbossmodules/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":30643,"name":"hibernate-orm","ecosystem":"bower","description":null,"homepage":"","licenses":"apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":null,"versions_count":347,"first_release_published_at":"2010-07-21T20:35:29.000Z","latest_release_published_at":"2026-01-15T13:41:07.000Z","latest_release_number":"7.2.1","last_synced_at":"2026-04-01T15:12:19.474Z","created_at":"2022-04-04T21:57:34.618Z","updated_at":"2026-04-01T15:12:19.474Z","registry_url":null,"install_command":"bower install hibernate-orm","documentation_url":null,"metadata":{},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:11.947Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":37.51210619267361,"dependent_packages_count":5.144419757306443,"stargazers_count":0.9727681877741697,"forks_count":0.30051842989802313,"average":10.982453141913062},"purl":"pkg:bower/hibernate-orm","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/bower/hibernate-orm","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/bower/hibernate-orm","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/bower/hibernate-orm/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/bower.io/packages/hibernate-orm/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/bower.io/packages/hibernate-orm/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/bower.io/packages/hibernate-orm/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/bower.io/packages/hibernate-orm/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/bower.io/packages/hibernate-orm/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/bower.io/packages/hibernate-orm/codemeta","maintainers":[],"registry":{"name":"bower.io","url":"https://bower.io","ecosystem":"bower","default":true,"packages_count":70212,"maintainers_count":0,"namespaces_count":0,"keywords_count":28883,"github":"bower","metadata":{"funded_packages_count":3374},"icon_url":"https://github.com/bower.png","created_at":"2022-04-04T15:19:22.529Z","updated_at":"2026-06-10T05:19:40.252Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/bower.io/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/bower.io/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/bower.io/namespaces"}},{"id":5116368,"name":"org.hibernate:hibernate-agroal","ecosystem":"maven","description":"The `hibernate-agroal` module has been relocated to the `org.hibernate.orm` group","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":347,"first_release_published_at":"2018-02-01T19:44:00.000Z","latest_release_published_at":"2021-08-04T13:47:09.000Z","latest_release_number":"5.5.6","last_synced_at":"2026-06-15T05:01:08.219Z","created_at":"2022-08-02T03:57:19.096Z","updated_at":"2026-06-15T05:01:08.220Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-agroal/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-agroal/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:12.387Z","dependent_packages_count":2,"downloads":null,"downloads_period":null,"dependent_repos_count":574,"rankings":{"downloads":null,"dependent_repos_count":0.556023082471748,"dependent_packages_count":22.91576500761401,"stargazers_count":3.9941492345916485,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":7.47630640378296},"purl":"pkg:maven/org.hibernate/hibernate-agroal","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-agroal","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-agroal","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-agroal/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-agroal/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-agroal/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-agroal/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-agroal/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-agroal/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-agroal/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5430290,"name":"org.hibernate:hibernate-ehcache","ecosystem":"maven","description":"Hibernate ORM 6.0.0.Alpha7 release. See http://hibernate.org/orm/releases/6.0","homepage":"http://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":287,"first_release_published_at":"2008-10-28T01:47:48.000Z","latest_release_published_at":"2021-08-04T13:48:50.000Z","latest_release_number":"5.5.6","last_synced_at":"2026-06-18T16:01:31.360Z","created_at":"2022-11-15T22:28:29.093Z","updated_at":"2026-06-18T16:01:31.378Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-ehcache/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-ehcache/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:12.696Z","dependent_packages_count":456,"downloads":null,"downloads_period":null,"dependent_repos_count":18435,"rankings":{"downloads":null,"dependent_repos_count":0.049290694878576576,"dependent_packages_count":0.17532259357217278,"stargazers_count":3.9941492345916485,"forks_count":2.439288290454436,"docker_downloads_count":0.8419491865031659,"average":1.5},"purl":"pkg:maven/org.hibernate/hibernate-ehcache","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-ehcache","docker_dependents_count":384,"docker_downloads_count":48958005,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-ehcache","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-ehcache/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":true,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-ehcache/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-ehcache/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-ehcache/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-ehcache/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-ehcache/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-ehcache/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5129315,"name":"org.hibernate:hibernate-core","ecosystem":"maven","description":"The `hibernate-core` module has been relocated to the `org.hibernate.orm` group","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":480,"first_release_published_at":"2008-09-26T20:39:07.000Z","latest_release_published_at":"2021-08-04T13:47:42.000Z","latest_release_number":"5.5.6","last_synced_at":"2026-06-12T04:01:58.919Z","created_at":"2022-08-03T09:24:49.458Z","updated_at":"2026-06-18T11:54:11.470Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-core/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-core/","metadata":{},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.327Z","dependent_packages_count":3469,"downloads":null,"downloads_period":null,"dependent_repos_count":145451,"rankings":{"downloads":null,"dependent_repos_count":0.005810691672677727,"dependent_packages_count":0.019435761801715155,"stargazers_count":3.9941492345916485,"forks_count":2.439288290454436,"docker_downloads_count":0.7591969223371002,"average":1.4435761801715157},"purl":"pkg:maven/org.hibernate/hibernate-core","advisories":[{"uuid":"GSA_kwCzR0hTQS0ycDV3LWN2ZzUtZ2M1Y84ABRfV","url":"https://github.com/advisories/GHSA-2p5w-cvg5-gc5c","title":"Hibernate vulnerable to SQL Injection","description":"A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive information disclosure, such as reading system files, and allow for data manipulation or deletion within the application's database, resulting in an application level denial of service.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-01-23T09:30:28.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-0603","https://access.redhat.com/security/cve/CVE-2026-0603","https://bugzilla.redhat.com/show_bug.cgi?id=2427147","https://access.redhat.com/errata/RHSA-2026:4915","https://access.redhat.com/errata/RHSA-2026:4916","https://access.redhat.com/errata/RHSA-2026:4917","https://access.redhat.com/errata/RHSA-2026:4924","https://access.redhat.com/errata/RHSA-2026:6011","https://access.redhat.com/errata/RHSA-2026:6012","https://github.com/advisories/GHSA-2p5w-cvg5-gc5c"],"source_kind":"github","identifiers":["GHSA-2p5w-cvg5-gc5c","CVE-2026-0603"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-04-16T23:00:09.229Z","updated_at":"2026-06-14T01:01:01.300Z","epss_percentage":0.00074,"epss_percentile":0.22677,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0ycDV3LWN2ZzUtZ2M1Y84ABRfV","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS0ycDV3LWN2ZzUtZ2M1Y84ABRfV","packages":[{"ecosystem":"maven","package_name":"org.hibernate:hibernate-core","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003e= 5.2.8, \u003c= 5.6.15"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0ycDV3LWN2ZzUtZ2M1Y84ABRfV/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThncmctcTk0NC1jY2g1","url":"https://github.com/advisories/GHSA-8grg-q944-cch5","title":"SQL Injection in Hibernate ORM","description":"A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-02-10T23:05:04.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2019-14900","https://bugzilla.redhat.com/show_bug.cgi?id=1666499","https://lists.apache.org/thread.html/r833c1276e41334fa675848a08daf0c61f39009f9f9a400d9f7006d44@%3Cdev.turbine.apache.org%3E","https://github.com/hibernate/hibernate-orm/commit/3f3c1ab50604ab9ba99e25d2016fb85f3ba9dcd4","https://github.com/hibernate/hibernate-orm/commit/646b383f959eff18d58081b1a574f0d777d353da","https://github.com/hibernate/hibernate-orm/commit/e0e22ea256c1906235d6a8e90b79c4ce33d0861f","https://github.com/hibernate/hibernate-orm/commit/eebf01fbf3c2550ee70cdc9c1b02b52e330c8c36","https://security.netapp.com/advisory/ntap-20220210-0020","https://github.com/advisories/GHSA-8grg-q944-cch5"],"source_kind":"github","identifiers":["GHSA-8grg-q944-cch5","CVE-2019-14900"],"repository_url":"https://github.com/hibernate/hibernate-orm","blast_radius":0.0,"created_at":"2022-12-21T16:13:04.446Z","updated_at":"2026-06-17T17:05:56.789Z","epss_percentage":0.01696,"epss_percentile":0.82502,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThncmctcTk0NC1jY2g1","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThncmctcTk0NC1jY2g1","packages":[{"ecosystem":"maven","package_name":"org.hibernate:hibernate-core","versions":[{"first_patched_version":"5.5.0.Beta1","vulnerable_version_range":"\u003e= 5.5.0.Alpha1, \u003c 5.5.0.Beta1"},{"first_patched_version":"5.4.18","vulnerable_version_range":"\u003e= 5.4.0, \u003c 5.4.18"},{"first_patched_version":"5.3.18","vulnerable_version_range":"\u003c 5.3.18"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThncmctcTk0NC1jY2g1/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo4anctZzZmcS1tcDdo","url":"https://github.com/advisories/GHSA-j8jw-g6fq-mp7h","title":"SQL injection in hibernate-core","description":"A flaw was found in hibernate-core in versions prior to 5.3.20.Final and in 5.4.0.Final up to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-02-09T22:57:29.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.4,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-25638","https://bugzilla.redhat.com/show_bug.cgi?id=1881353","https://lists.debian.org/debian-lts-announce/2021/01/msg00000.html","https://www.debian.org/security/2021/dsa-4908","https://lists.apache.org/thread.html/r833c1276e41334fa675848a08daf0c61f39009f9f9a400d9f7006d44@%3Cdev.turbine.apache.org%3E","https://lists.apache.org/thread.html/rf2378209c676a28b71f9b604a3b3517c448540b85367160e558ef9df@%3Ccommits.turbine.apache.org%3E","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://github.com/hibernate/hibernate-orm/commit/36ebf7d3836e83e99f2a91777b5389e1daf1f2b7","https://github.com/hibernate/hibernate-orm/commit/59fede7acaaa1579b561407aefa582311f7ebe78","https://github.com/hibernate/hibernate-orm/commit/d22bbb5c339c9df7712c3365bb1df97c91b35ec5","https://github.com/advisories/GHSA-j8jw-g6fq-mp7h"],"source_kind":"github","identifiers":["GHSA-j8jw-g6fq-mp7h","CVE-2020-25638"],"repository_url":"https://github.com/hibernate/hibernate-orm","blast_radius":0.0,"created_at":"2022-12-21T16:11:48.523Z","updated_at":"2026-04-27T16:05:09.695Z","epss_percentage":0.00676,"epss_percentile":0.71554,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo4anctZzZmcS1tcDdo","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo4anctZzZmcS1tcDdo","packages":[{"ecosystem":"maven","package_name":"org.hibernate:hibernate-core","versions":[{"first_patched_version":"5.3.20.Final","vulnerable_version_range":"\u003c 5.3.20.Final"},{"first_patched_version":"5.4.24.Final","vulnerable_version_range":"\u003e= 5.4.0.Final, \u003c 5.4.24.Final"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo4anctZzZmcS1tcDdo/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-core","docker_dependents_count":14587,"docker_downloads_count":1185589351,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-core","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-core/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":true,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-core/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-core/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-core/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-core/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-core/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-core/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932087,"name":"org.hibernate.orm:hibernate-community-dialects","ecosystem":"maven","description":"Hibernate's community supported dialects","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":219,"first_release_published_at":"2021-08-04T13:12:21.000Z","latest_release_published_at":"2026-04-20T15:33:40.000Z","latest_release_number":"7.3.2.Final","last_synced_at":"2026-06-18T14:31:11.077Z","created_at":"2022-07-27T03:09:52.972Z","updated_at":"2026-06-18T14:31:11.077Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-community-dialects/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-community-dialects/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:12.782Z","dependent_packages_count":12,"downloads":null,"downloads_period":null,"dependent_repos_count":38,"rankings":{"downloads":null,"dependent_repos_count":3.5723731666265928,"dependent_packages_count":7.340506532018915,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":4.337681333653923},"purl":"pkg:maven/org.hibernate.orm/hibernate-community-dialects","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-community-dialects","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-community-dialects","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-community-dialects/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-community-dialects/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-community-dialects/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-community-dialects/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-community-dialects/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-community-dialects/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-community-dialects/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932091,"name":"org.hibernate.orm:hibernate-core","ecosystem":"maven","description":"Hibernate's core ORM functionality","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":232,"first_release_published_at":"2018-12-06T17:06:43.000Z","latest_release_published_at":"2026-05-03T00:45:10.000Z","latest_release_number":"7.1.25.Final","last_synced_at":"2026-06-08T02:15:47.133Z","created_at":"2022-07-27T03:09:54.124Z","updated_at":"2026-06-08T02:15:47.134Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-core/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-core/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.726Z","dependent_packages_count":174,"downloads":null,"downloads_period":null,"dependent_repos_count":1750,"rankings":{"downloads":null,"dependent_repos_count":0.26729181694317544,"dependent_packages_count":0.7391600545002806,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":5.264687024124389,"average":2.541796906307606},"purl":"pkg:maven/org.hibernate.orm/hibernate-core","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-core","docker_dependents_count":6,"docker_downloads_count":647085,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-core","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-core/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-core/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-core/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-core/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-core/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-core/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-core/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5047978,"name":"org.hibernate.orm:hibernate-osgi","ecosystem":"maven","description":"Hibernate ORM 6.0.0.Alpha7 release. See http://hibernate.org/orm/releases/6.0","homepage":"http://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":7,"first_release_published_at":"2018-12-06T17:07:00.000Z","latest_release_published_at":"2021-03-18T21:20:20.000Z","latest_release_number":"6.0.0.Alpha7","last_synced_at":"2026-06-15T14:10:37.929Z","created_at":"2022-07-27T21:09:32.077Z","updated_at":"2026-06-15T14:10:37.929Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-osgi/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-osgi/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.714Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":48.85985838769028,"stargazers_count":3.2891054026560833,"forks_count":1.9682867077445358,"average":21.524298609759573},"purl":"pkg:maven/org.hibernate.orm/hibernate-osgi","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-osgi","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-osgi","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-osgi/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-osgi/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-osgi/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-osgi/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-osgi/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-osgi/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-osgi/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932188,"name":"org.hibernate:hibernate-envers-jakarta","ecosystem":"maven","description":"Hibernate's entity version (audit/history) support Jakarta edition","homepage":"https://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":31,"first_release_published_at":"2021-04-30T12:26:54.000Z","latest_release_published_at":"2021-08-04T13:49:07.000Z","latest_release_number":"5.5.6","last_synced_at":"2026-06-18T16:02:41.955Z","created_at":"2022-07-27T03:10:55.795Z","updated_at":"2026-06-18T16:02:41.955Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-envers-jakarta/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-envers-jakarta/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:11.931Z","dependent_packages_count":7,"downloads":null,"downloads_period":null,"dependent_repos_count":22,"rankings":{"downloads":null,"dependent_repos_count":5.0420774224573215,"dependent_packages_count":8.262202452512623,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":4.935531377735033},"purl":"pkg:maven/org.hibernate/hibernate-envers-jakarta","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-envers-jakarta","docker_dependents_count":1,"docker_downloads_count":666,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-envers-jakarta","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-envers-jakarta/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-envers-jakarta/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-envers-jakarta/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-envers-jakarta/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-envers-jakarta/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-envers-jakarta/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-envers-jakarta/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5047973,"name":"org.hibernate.orm:hibernate-envers","ecosystem":"maven","description":"Hibernate's entity version (audit/history) support","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":234,"first_release_published_at":"2019-11-23T15:46:47.000Z","latest_release_published_at":"2026-05-10T00:21:51.000Z","latest_release_number":"7.3.4.Final","last_synced_at":"2026-06-18T16:02:40.846Z","created_at":"2022-07-27T21:09:25.859Z","updated_at":"2026-06-18T16:02:40.846Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-envers/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-envers/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.521Z","dependent_packages_count":28,"downloads":null,"downloads_period":null,"dependent_repos_count":71,"rankings":{"downloads":null,"dependent_repos_count":2.396008655926906,"dependent_packages_count":3.654724693435922,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":3.1221447463332535},"purl":"pkg:maven/org.hibernate.orm/hibernate-envers","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-envers","docker_dependents_count":2,"docker_downloads_count":285,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-envers","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-envers/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-envers/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-envers/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-envers/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-envers/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-envers/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-envers/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11824573,"name":"org.hibernate:hibernate-vector","ecosystem":"maven","description":"The `hibernate-vector` module has been relocated to the `org.hibernate.orm` group","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":149,"first_release_published_at":"2023-11-23T14:28:17.000Z","latest_release_published_at":"2026-05-10T00:21:51.000Z","latest_release_number":"7.3.4.Final","last_synced_at":"2026-06-18T16:02:03.429Z","created_at":"2025-06-22T00:45:46.272Z","updated_at":"2026-06-18T16:02:03.429Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-vector/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-vector/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:12.698Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.67413128002411,"dependent_packages_count":48.14160507629321,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.907868178158665},"purl":"pkg:maven/org.hibernate/hibernate-vector","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-vector","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-vector","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-vector/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-vector/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-vector/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-vector/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-vector/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-vector/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-vector/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932075,"name":"org.hibernate.orm:hibernate-ant","ecosystem":"maven","description":"Annotation Processor to generate JPA 2 static metamodel classes","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":227,"first_release_published_at":"2021-10-11T20:56:23.000Z","latest_release_published_at":"2026-05-10T00:21:51.000Z","latest_release_number":"7.3.4.Final","last_synced_at":"2026-06-15T15:02:52.460Z","created_at":"2022-07-27T03:09:49.051Z","updated_at":"2026-06-15T15:02:52.460Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-ant/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-ant/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:11.934Z","dependent_packages_count":15,"downloads":null,"downloads_period":null,"dependent_repos_count":4,"rankings":{"downloads":null,"dependent_repos_count":12.011300793459966,"dependent_packages_count":6.582712190430392,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":6.257964654965136},"purl":"pkg:maven/org.hibernate.orm/hibernate-ant","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-ant","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-ant","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-ant/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-ant/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-ant/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-ant/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-ant/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-ant/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-ant/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5107169,"name":"org.hibernate:hibernate-jipijapa","ecosystem":"maven","description":"Integrate with WildFly JipiJapa","homepage":"http://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":81,"first_release_published_at":"2018-04-27T17:06:51.000Z","latest_release_published_at":"2021-12-16T10:52:10.000Z","latest_release_number":"5.4.33","last_synced_at":"2026-06-15T18:15:42.157Z","created_at":"2022-07-30T01:09:34.343Z","updated_at":"2026-06-15T18:15:42.158Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-jipijapa/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-jipijapa/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.720Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":1,"rankings":{"downloads":null,"dependent_repos_count":20.645187144345595,"dependent_packages_count":49.884988378616654,"stargazers_count":3.9941492345916485,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":19.240903262002085},"purl":"pkg:maven/org.hibernate/hibernate-jipijapa","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-jipijapa","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-jipijapa","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-jipijapa/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jipijapa/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jipijapa/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jipijapa/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jipijapa/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jipijapa/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jipijapa/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":13873639,"name":"org.hibernate.orm:hibernate-ucp","ecosystem":"maven","description":"Integration for Oracle UCP into Hibernate O/RM","homepage":"https://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":67,"first_release_published_at":"2024-03-20T22:13:07.000Z","latest_release_published_at":"2026-05-03T00:18:11.000Z","latest_release_number":"6.6.50.Final","last_synced_at":"2026-05-12T14:21:31.769Z","created_at":"2026-02-22T00:32:43.476Z","updated_at":"2026-05-12T14:21:31.769Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-ucp/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-ucp/","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-02-22T00:32:44.528Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":30.143286538921338,"dependent_packages_count":43.09475014516514,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":36.61901834204324},"purl":"pkg:maven/org.hibernate.orm/hibernate-ucp","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-ucp","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-ucp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-ucp/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-ucp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-ucp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-ucp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-ucp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-ucp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-ucp/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":13873638,"name":"org.hibernate:hibernate-ucp","ecosystem":"maven","description":"The `hibernate-ucp` module has been relocated to the `org.hibernate.orm` group","homepage":"https://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":66,"first_release_published_at":"2024-03-20T22:13:08.000Z","latest_release_published_at":"2026-04-19T00:17:48.000Z","latest_release_number":"6.6.49.Final","last_synced_at":"2026-06-19T01:45:34.555Z","created_at":"2026-02-22T00:32:43.309Z","updated_at":"2026-06-19T01:45:34.555Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-ucp/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-ucp/","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-02-22T00:32:44.522Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":30.143286538921338,"dependent_packages_count":43.09475014516514,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":36.61901834204324},"purl":"pkg:maven/org.hibernate/hibernate-ucp","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-ucp","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-ucp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-ucp/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-ucp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-ucp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-ucp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-ucp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-ucp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-ucp/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932292,"name":"org.hibernate:hibernate-hikaricp","ecosystem":"maven","description":"The `hibernate-hikaricp` module has been relocated to the `org.hibernate.orm` group","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":406,"first_release_published_at":"2014-07-17T04:59:56.000Z","latest_release_published_at":"2021-08-04T13:49:15.000Z","latest_release_number":"5.5.6","last_synced_at":"2026-06-12T04:01:57.433Z","created_at":"2022-07-27T03:11:50.881Z","updated_at":"2026-06-12T04:01:57.434Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-hikaricp/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-hikaricp/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.573Z","dependent_packages_count":607,"downloads":null,"downloads_period":null,"dependent_repos_count":1147,"rankings":{"downloads":null,"dependent_repos_count":0.35224813657129117,"dependent_packages_count":0.12683337340706902,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":5.91147711789693,"average":2.5656808527690953},"purl":"pkg:maven/org.hibernate/hibernate-hikaricp","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-hikaricp","docker_dependents_count":72,"docker_downloads_count":88014352,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-hikaricp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-hikaricp/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-hikaricp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-hikaricp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-hikaricp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-hikaricp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-hikaricp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-hikaricp/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5112933,"name":"org.hibernate:hibernate-c3p0","ecosystem":"maven","description":"The `hibernate-c3p0` module has been relocated to the `org.hibernate.orm` group","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":480,"first_release_published_at":"2008-10-28T01:45:00.000Z","latest_release_published_at":"2021-08-04T13:47:10.000Z","latest_release_number":"5.5.6","last_synced_at":"2026-06-12T04:01:57.651Z","created_at":"2022-07-31T10:16:38.996Z","updated_at":"2026-06-12T04:01:57.651Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-c3p0/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-c3p0/","metadata":{},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:12.785Z","dependent_packages_count":279,"downloads":null,"downloads_period":null,"dependent_repos_count":14259,"rankings":{"downloads":null,"dependent_repos_count":0.06051134086719564,"dependent_packages_count":0.2887312655285726,"stargazers_count":3.9941492345916485,"forks_count":2.439288290454436,"docker_downloads_count":2.0329406107237316,"average":1.763124148433117},"purl":"pkg:maven/org.hibernate/hibernate-c3p0","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-c3p0","docker_dependents_count":218,"docker_downloads_count":116653706,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-c3p0","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-c3p0/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":true,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-c3p0/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-c3p0/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-c3p0/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-c3p0/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-c3p0/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-c3p0/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932214,"name":"org.hibernate:hibernate-orm-jbossmodules","ecosystem":"maven","description":"Feature Pack of Hibernate ORM modules for WildFly 17","homepage":"http://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":76,"first_release_published_at":"2018-04-27T17:08:29.000Z","latest_release_published_at":"2021-12-16T10:52:18.000Z","latest_release_number":"5.4.33","last_synced_at":"2026-06-16T14:13:33.095Z","created_at":"2022-07-27T03:11:20.969Z","updated_at":"2026-06-16T14:13:33.095Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-orm-jbossmodules/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-orm-jbossmodules/","metadata":{},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:14.923Z","dependent_packages_count":3,"downloads":null,"downloads_period":null,"dependent_repos_count":4,"rankings":{"downloads":null,"dependent_repos_count":12.011300793459966,"dependent_packages_count":17.33189067884908,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":8.945259277069809},"purl":"pkg:maven/org.hibernate/hibernate-orm-jbossmodules","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-orm-jbossmodules","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-orm-jbossmodules","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-orm-jbossmodules/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-orm-jbossmodules/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-orm-jbossmodules/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-orm-jbossmodules/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-orm-jbossmodules/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-orm-jbossmodules/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-orm-jbossmodules/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5091520,"name":"org.hibernate:hibernate-entitymanager","ecosystem":"maven","description":"Hibernate ORM 6.0.0.Alpha7 release. See http://hibernate.org/orm/releases/6.0","homepage":"http://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":289,"first_release_published_at":"2006-10-19T19:55:02.000Z","latest_release_published_at":"2021-08-04T13:48:53.000Z","latest_release_number":"5.5.6","last_synced_at":"2026-06-16T14:20:50.978Z","created_at":"2022-07-29T08:47:13.876Z","updated_at":"2026-06-16T14:20:50.978Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-entitymanager/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-entitymanager/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:12.737Z","dependent_packages_count":2421,"downloads":null,"downloads_period":null,"dependent_repos_count":93136,"rankings":{"downloads":null,"dependent_repos_count":0.010819908631882664,"dependent_packages_count":0.027650877614811255,"stargazers_count":3.9941492345916485,"forks_count":2.439288290454436,"docker_downloads_count":1.035906067163581,"average":1.5015628756912718},"purl":"pkg:maven/org.hibernate/hibernate-entitymanager","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-entitymanager","docker_dependents_count":711,"docker_downloads_count":371449877,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-entitymanager","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-entitymanager/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":true,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-entitymanager/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-entitymanager/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-entitymanager/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-entitymanager/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-entitymanager/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-entitymanager/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932102,"name":"org.hibernate.orm:hibernate-jpamodelgen","ecosystem":"maven","description":"The `hibernate-jpamodelgen` module has been renamed `hibernate-processor`","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":231,"first_release_published_at":"2018-12-06T17:06:47.000Z","latest_release_published_at":"2026-05-10T00:21:51.000Z","latest_release_number":"7.3.4.Final","last_synced_at":"2026-06-15T12:03:56.400Z","created_at":"2022-07-27T03:10:01.095Z","updated_at":"2026-06-15T12:03:56.400Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-jpamodelgen/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-jpamodelgen/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:11.898Z","dependent_packages_count":24,"downloads":null,"downloads_period":null,"dependent_repos_count":137,"rankings":{"downloads":null,"dependent_repos_count":1.5129838903582593,"dependent_packages_count":5.059709866153723,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":3.252634848120542},"purl":"pkg:maven/org.hibernate.orm/hibernate-jpamodelgen","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-jpamodelgen","docker_dependents_count":3,"docker_downloads_count":70,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-jpamodelgen","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-jpamodelgen/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jpamodelgen/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jpamodelgen/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jpamodelgen/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jpamodelgen/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jpamodelgen/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jpamodelgen/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5091521,"name":"org.hibernate:hibernate-spatial","ecosystem":"maven","description":"The `hibernate-spatial` module has been relocated to the `org.hibernate.orm` group","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":395,"first_release_published_at":"2015-04-30T04:27:41.000Z","latest_release_published_at":"2021-08-04T13:49:34.000Z","latest_release_number":"5.5.6","last_synced_at":"2026-06-13T01:31:11.612Z","created_at":"2022-07-29T08:47:14.763Z","updated_at":"2026-06-13T01:31:11.613Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-spatial/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-spatial/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.699Z","dependent_packages_count":129,"downloads":null,"downloads_period":null,"dependent_repos_count":1425,"rankings":{"downloads":null,"dependent_repos_count":0.3085677646870241,"dependent_packages_count":0.5920894445780236,"stargazers_count":3.9941492345916485,"forks_count":2.439288290454436,"docker_downloads_count":3.2808367396008653,"average":2.1229862947823994},"purl":"pkg:maven/org.hibernate/hibernate-spatial","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-spatial","docker_dependents_count":64,"docker_downloads_count":31800,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-spatial","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-spatial/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-spatial/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-spatial/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-spatial/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-spatial/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-spatial/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-spatial/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932066,"name":"org.hibernate.orm:hibernate-core-jakarta","ecosystem":"maven","description":"Hibernate O/RM implementation of the Jakarta Persistence specification","homepage":"https://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":1,"first_release_published_at":"2021-08-04T13:14:04.000Z","latest_release_published_at":"2021-08-04T13:14:04.000Z","latest_release_number":"6.0.0.Alpha9","last_synced_at":"2026-05-12T14:22:55.570Z","created_at":"2022-07-27T03:09:42.797Z","updated_at":"2026-05-12T14:22:55.571Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-core-jakarta/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-core-jakarta/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:14.268Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":1,"rankings":{"downloads":null,"dependent_repos_count":20.645187144345595,"dependent_packages_count":49.884988378616654,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":19.242005289733108},"purl":"pkg:maven/org.hibernate.orm/hibernate-core-jakarta","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-core-jakarta","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-core-jakarta","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-core-jakarta/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-core-jakarta/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-core-jakarta/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-core-jakarta/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-core-jakarta/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-core-jakarta/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-core-jakarta/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5047962,"name":"org.hibernate.orm:hibernate-ehcache","ecosystem":"maven","description":"Hibernate ORM 6.0.0.Alpha7 release. See http://hibernate.org/orm/releases/6.0","homepage":"http://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":5,"first_release_published_at":"2019-11-23T15:46:46.000Z","latest_release_published_at":"2021-03-18T21:20:45.000Z","latest_release_number":"6.0.0.Alpha7","last_synced_at":"2026-06-16T05:16:15.828Z","created_at":"2022-07-27T21:09:20.879Z","updated_at":"2026-06-16T05:16:15.829Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-ehcache/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-ehcache/","metadata":{},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:14.825Z","dependent_packages_count":3,"downloads":null,"downloads_period":null,"dependent_repos_count":11,"rankings":{"downloads":null,"dependent_repos_count":7.341909112767492,"dependent_packages_count":22.91576500761401,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":9.173879939087922},"purl":"pkg:maven/org.hibernate.orm/hibernate-ehcache","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-ehcache","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-ehcache","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-ehcache/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-ehcache/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-ehcache/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-ehcache/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-ehcache/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-ehcache/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-ehcache/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932074,"name":"org.hibernate.orm:hibernate-java8","ecosystem":"maven","description":"Hibernate ORM 6.0.0.Alpha7 release. See http://hibernate.org/orm/releases/6.0","homepage":"http://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":5,"first_release_published_at":"2019-11-23T15:46:50.000Z","latest_release_published_at":"2021-03-18T21:20:41.000Z","latest_release_number":"6.0.0.Alpha7","last_synced_at":"2026-06-17T00:46:00.572Z","created_at":"2022-07-27T03:09:48.925Z","updated_at":"2026-06-17T00:46:00.572Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-java8/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-java8/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:14.685Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":2,"rankings":{"downloads":null,"dependent_repos_count":15.992826801314418,"dependent_packages_count":49.884988378616654,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":18.078915203975313},"purl":"pkg:maven/org.hibernate.orm/hibernate-java8","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-java8","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-java8","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-java8/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-java8/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-java8/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-java8/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-java8/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-java8/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-java8/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11849859,"name":"org.hibernate.orm:hibernate-scan-jandex","ecosystem":"maven","description":"Integrate support for Jandex into Hibernate O/RM","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":74,"first_release_published_at":"2024-11-13T13:51:19.000Z","latest_release_published_at":"2026-05-10T00:21:51.000Z","latest_release_number":"7.3.4.Final","last_synced_at":"2026-05-12T14:24:01.062Z","created_at":"2025-06-29T01:02:03.846Z","updated_at":"2026-05-12T14:24:01.062Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-scan-jandex/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-scan-jandex/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.759Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.518166505570626,"dependent_packages_count":47.91863289283537,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.718399699203},"purl":"pkg:maven/org.hibernate.orm/hibernate-scan-jandex","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-scan-jandex","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-scan-jandex","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-scan-jandex/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-scan-jandex/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-scan-jandex/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-scan-jandex/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-scan-jandex/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-scan-jandex/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-scan-jandex/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932072,"name":"org.hibernate.orm:hibernate-gradle-plugin","ecosystem":"maven","description":"Hibernate ORM 6.0.0.Alpha6 release. See http://hibernate.org/orm/releases/6.0","homepage":"http://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":4,"first_release_published_at":"2019-11-23T15:46:48.000Z","latest_release_published_at":"2020-08-20T20:49:58.000Z","latest_release_number":"6.0.0.Alpha6","last_synced_at":"2026-06-18T11:36:59.712Z","created_at":"2022-07-27T03:09:48.145Z","updated_at":"2026-06-18T11:36:59.713Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-gradle-plugin/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-gradle-plugin/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:12.261Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":1,"rankings":{"downloads":null,"dependent_repos_count":20.645187144345595,"dependent_packages_count":49.884988378616654,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":19.242005289733108},"purl":"pkg:maven/org.hibernate.orm/hibernate-gradle-plugin","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-gradle-plugin","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-gradle-plugin","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-gradle-plugin/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-gradle-plugin/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-gradle-plugin/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-gradle-plugin/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-gradle-plugin/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-gradle-plugin/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-gradle-plugin/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5063206,"name":"org.hibernate:hibernate-gradle-plugin","ecosystem":"maven","description":"Hibernate ORM 6.0.0.Alpha6 release. See http://hibernate.org/orm/releases/6.0","homepage":"http://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":203,"first_release_published_at":"2013-09-12T16:58:15.000Z","latest_release_published_at":"2021-08-04T13:49:14.000Z","latest_release_number":"5.5.6","last_synced_at":"2026-06-16T02:48:15.768Z","created_at":"2022-07-28T04:10:41.037Z","updated_at":"2026-06-16T02:48:15.768Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-gradle-plugin/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-gradle-plugin/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:14.107Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":25,"rankings":{"downloads":null,"dependent_repos_count":4.6515588683177045,"dependent_packages_count":32.73282840426385,"stargazers_count":3.9941492345916485,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":10.95445619940691},"purl":"pkg:maven/org.hibernate/hibernate-gradle-plugin","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-gradle-plugin","docker_dependents_count":1,"docker_downloads_count":8,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-gradle-plugin","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-gradle-plugin/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-gradle-plugin/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-gradle-plugin/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-gradle-plugin/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-gradle-plugin/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-gradle-plugin/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-gradle-plugin/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932071,"name":"org.hibernate.orm:hibernate-infinispan","ecosystem":"maven","description":"Hibernate ORM 6.0.0.Alpha7 release. See http://hibernate.org/orm/releases/6.0","homepage":"http://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":5,"first_release_published_at":"2019-11-23T15:46:50.000Z","latest_release_published_at":"2021-03-18T21:20:35.000Z","latest_release_number":"6.0.0.Alpha7","last_synced_at":"2026-05-12T14:23:58.983Z","created_at":"2022-07-27T03:09:47.698Z","updated_at":"2026-05-12T14:23:58.984Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-infinispan/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-infinispan/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:14.573Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":48.85985838769028,"stargazers_count":null,"forks_count":null,"average":40.41990116431883},"purl":"pkg:maven/org.hibernate.orm/hibernate-infinispan","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-infinispan","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-infinispan","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-infinispan/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-infinispan/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-infinispan/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-infinispan/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-infinispan/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-infinispan/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-infinispan/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4909285,"name":"org.bedework:hibernate-core","ecosystem":"maven","description":"The core O/RM functionality as provided by Hibernate","homepage":"http://hibernate.org","licenses":"GNU Lesser General Public License","normalized_licenses":["LGPL-2.1+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.bedework","versions_count":1,"first_release_published_at":"2022-02-05T04:56:07.000Z","latest_release_published_at":"2022-02-05T04:56:07.000Z","latest_release_number":"5.2.5.1FinalBwPatched","last_synced_at":"2026-05-12T14:24:00.649Z","created_at":"2022-07-27T00:24:24.558Z","updated_at":"2026-05-12T14:24:00.650Z","registry_url":"https://central.sonatype.com/artifact/org.bedework/hibernate-core/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.bedework/hibernate-core/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:22.438Z","dependent_packages_count":4,"downloads":null,"downloads_period":null,"dependent_repos_count":1,"rankings":{"downloads":null,"dependent_repos_count":20.645187144345595,"dependent_packages_count":13.753105714514707,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":10.209034623707621},"purl":"pkg:maven/org.bedework/hibernate-core","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.bedework:hibernate-core","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.bedework:hibernate-core","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.bedework:hibernate-core/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.bedework:hibernate-core/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.bedework:hibernate-core/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.bedework:hibernate-core/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.bedework:hibernate-core/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.bedework:hibernate-core/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.bedework:hibernate-core/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932077,"name":"org.hibernate.orm:hibernate-envers-jakarta","ecosystem":"maven","description":"Hibernate's entity version (audit/history) support Jakarta edition","homepage":"https://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":1,"first_release_published_at":"2021-08-04T13:12:30.000Z","latest_release_published_at":"2021-08-04T13:12:30.000Z","latest_release_number":"6.0.0.Alpha9","last_synced_at":"2026-06-15T16:17:00.726Z","created_at":"2022-07-27T03:09:49.758Z","updated_at":"2026-06-15T16:17:00.726Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-envers-jakarta/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-envers-jakarta/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.526Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":48.85985838769028,"stargazers_count":null,"forks_count":null,"average":40.41990116431883},"purl":"pkg:maven/org.hibernate.orm/hibernate-envers-jakarta","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-envers-jakarta","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-envers-jakarta","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-envers-jakarta/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-envers-jakarta/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-envers-jakarta/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-envers-jakarta/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-envers-jakarta/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-envers-jakarta/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-envers-jakarta/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11824571,"name":"org.hibernate.orm:hibernate-processor","ecosystem":"maven","description":"Hibernate compile-time tooling","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":78,"first_release_published_at":"2024-04-16T15:42:47.000Z","latest_release_published_at":"2026-05-10T00:21:51.000Z","latest_release_number":"7.3.4.Final","last_synced_at":"2026-05-12T14:24:03.917Z","created_at":"2025-06-22T00:45:46.036Z","updated_at":"2026-05-12T14:24:03.918Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-processor/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-processor/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:12.358Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.67413128002411,"dependent_packages_count":48.14160507629321,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.907868178158665},"purl":"pkg:maven/org.hibernate.orm/hibernate-processor","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-processor","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-processor","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-processor/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-processor/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-processor/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-processor/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-processor/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-processor/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-processor/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4641988,"name":"cn.bestwu:hibernate-core","ecosystem":"maven","description":"The core O/RM functionality as provided by Hibernate","homepage":"http://hibernate.org","licenses":"GNU Lesser General Public License","normalized_licenses":["LGPL-2.1+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"cn.bestwu","versions_count":1,"first_release_published_at":"2016-12-10T12:21:02.000Z","latest_release_published_at":"2016-12-10T12:21:02.000Z","latest_release_number":"5.0.11.specid","last_synced_at":"2026-06-18T11:40:07.801Z","created_at":"2022-07-25T15:39:51.271Z","updated_at":"2026-06-18T11:40:07.801Z","registry_url":"https://central.sonatype.com/artifact/cn.bestwu/hibernate-core/","install_command":null,"documentation_url":"https://appdoc.app/artifact/cn.bestwu/hibernate-core/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.708Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":48.85985838769028,"stargazers_count":2.9446050685890732,"forks_count":1.8362650305074408,"average":21.405168106933544},"purl":"pkg:maven/cn.bestwu/hibernate-core","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/cn.bestwu:hibernate-core","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/cn.bestwu:hibernate-core","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/cn.bestwu:hibernate-core/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/cn.bestwu:hibernate-core/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/cn.bestwu:hibernate-core/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/cn.bestwu:hibernate-core/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/cn.bestwu:hibernate-core/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/cn.bestwu:hibernate-core/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/cn.bestwu:hibernate-core/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932173,"name":"org.hibernate:hibernate-maven-plugin","ecosystem":"maven","description":"A module of the Hibernate O/RM project","homepage":"http://hibernate.org","licenses":"GNU Lesser General Public License","normalized_licenses":["LGPL-2.1+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":8,"first_release_published_at":"2009-06-24T07:26:01.000Z","latest_release_published_at":"2014-01-22T18:01:40.000Z","latest_release_number":"4.3.1.Final","last_synced_at":"2026-06-15T19:16:20.367Z","created_at":"2022-07-27T03:10:39.617Z","updated_at":"2026-06-15T19:16:20.367Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-maven-plugin/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-maven-plugin/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.339Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":10,"rankings":{"downloads":null,"dependent_repos_count":7.704776789292297,"dependent_packages_count":49.884988378616654,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":16.006902700969786},"purl":"pkg:maven/org.hibernate/hibernate-maven-plugin","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-maven-plugin","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-maven-plugin","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-maven-plugin/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-maven-plugin/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-maven-plugin/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-maven-plugin/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-maven-plugin/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-maven-plugin/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-maven-plugin/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5116371,"name":"org.hibernate:hibernate-osgi","ecosystem":"maven","description":"Hibernate ORM 6.0.0.Alpha7 release. See http://hibernate.org/orm/releases/6.0","homepage":"http://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":219,"first_release_published_at":"2013-03-02T16:37:08.000Z","latest_release_published_at":"2021-08-04T13:49:28.000Z","latest_release_number":"5.5.6","last_synced_at":"2026-06-18T16:02:38.019Z","created_at":"2022-08-02T03:57:51.484Z","updated_at":"2026-06-18T16:02:38.019Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-osgi/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-osgi/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:14.830Z","dependent_packages_count":23,"downloads":null,"downloads_period":null,"dependent_repos_count":493,"rankings":{"downloads":null,"dependent_repos_count":0.6109241003446341,"dependent_packages_count":2.752464534743929,"stargazers_count":3.9941492345916485,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":2.449206540033662},"purl":"pkg:maven/org.hibernate/hibernate-osgi","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-osgi","docker_dependents_count":3,"docker_downloads_count":61,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-osgi","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-osgi/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-osgi/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-osgi/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-osgi/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-osgi/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-osgi/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-osgi/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932200,"name":"org.hibernate:hibernate-testing-jakarta","ecosystem":"maven","description":"Support for testing Hibernate ORM Jakarta functionality","homepage":"https://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":30,"first_release_published_at":"2021-05-12T15:59:54.000Z","latest_release_published_at":"2021-08-04T13:49:40.000Z","latest_release_number":"5.5.6","last_synced_at":"2026-06-13T12:33:17.278Z","created_at":"2022-07-27T03:11:13.269Z","updated_at":"2026-06-13T12:33:17.278Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-testing-jakarta/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-testing-jakarta/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:12.355Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":14,"rankings":{"downloads":null,"dependent_repos_count":6.459886190590687,"dependent_packages_count":32.73282840426385,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":11.40764005770618},"purl":"pkg:maven/org.hibernate/hibernate-testing-jakarta","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-testing-jakarta","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-testing-jakarta","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-testing-jakarta/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-testing-jakarta/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-testing-jakarta/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-testing-jakarta/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-testing-jakarta/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-testing-jakarta/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-testing-jakarta/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932114,"name":"org.hibernate.orm:hibernate-agroal","ecosystem":"maven","description":"Integration for Agroal as a ConnectionProvider for Hibernate ORM","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":236,"first_release_published_at":"2018-12-06T17:06:46.000Z","latest_release_published_at":"2026-05-10T00:21:51.000Z","latest_release_number":"7.3.4.Final","last_synced_at":"2026-05-12T14:24:14.662Z","created_at":"2022-07-27T03:10:06.886Z","updated_at":"2026-05-12T14:24:14.662Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-agroal/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-agroal/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:12.764Z","dependent_packages_count":3,"downloads":null,"downloads_period":null,"dependent_repos_count":4,"rankings":{"downloads":null,"dependent_repos_count":12.011300793459966,"dependent_packages_count":22.91576500761401,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":10.341227859261041},"purl":"pkg:maven/org.hibernate.orm/hibernate-agroal","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-agroal","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-agroal","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-agroal/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-agroal/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-agroal/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-agroal/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-agroal/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-agroal/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-agroal/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932098,"name":"org.hibernate.orm:hibernate-testing-jakarta","ecosystem":"maven","description":"Support for testing Hibernate ORM Jakarta functionality","homepage":"https://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":1,"first_release_published_at":"2021-08-04T13:12:54.000Z","latest_release_published_at":"2021-08-04T13:12:54.000Z","latest_release_number":"6.0.0.Alpha9","last_synced_at":"2026-05-12T14:24:19.507Z","created_at":"2022-07-27T03:09:56.937Z","updated_at":"2026-05-12T14:24:19.508Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-testing-jakarta/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-testing-jakarta/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:14.754Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":48.85985838769028,"stargazers_count":null,"forks_count":null,"average":40.41990116431883},"purl":"pkg:maven/org.hibernate.orm/hibernate-testing-jakarta","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-testing-jakarta","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-testing-jakarta","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-testing-jakarta/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-testing-jakarta/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-testing-jakarta/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-testing-jakarta/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-testing-jakarta/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-testing-jakarta/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-testing-jakarta/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932277,"name":"org.hibernate:hibernate-infinispan","ecosystem":"maven","description":"(deprecated - use org.infinispan:infinispan-hibernate-cache-v53 instead)","homepage":"https://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":110,"first_release_published_at":"2018-02-15T17:35:11.000Z","latest_release_published_at":"2021-08-04T13:49:15.000Z","latest_release_number":"5.5.6","last_synced_at":"2026-06-16T14:36:46.132Z","created_at":"2022-07-27T03:11:37.983Z","updated_at":"2026-06-16T14:36:46.132Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-infinispan/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-infinispan/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.064Z","dependent_packages_count":51,"downloads":null,"downloads_period":null,"dependent_repos_count":696,"rankings":{"downloads":null,"dependent_repos_count":0.4844914642943015,"dependent_packages_count":1.307806363709225,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":2.1375330608319305,"average":2.0735353049611285},"purl":"pkg:maven/org.hibernate/hibernate-infinispan","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-infinispan","docker_dependents_count":134,"docker_downloads_count":280370833,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-infinispan","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-infinispan/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-infinispan/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-infinispan/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-infinispan/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-infinispan/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-infinispan/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-infinispan/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5420119,"name":"org.hibernate:hibernate-vibur","ecosystem":"maven","description":"Integration for Vibur Connection pooling as a Hibernate ORM ConnectionProvider","homepage":"https://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":275,"first_release_published_at":"2018-01-18T16:36:00.000Z","latest_release_published_at":"2021-08-04T13:49:42.000Z","latest_release_number":"5.5.6","last_synced_at":"2026-06-15T14:04:25.780Z","created_at":"2022-11-13T18:06:31.623Z","updated_at":"2026-06-15T14:04:25.780Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-vibur/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-vibur/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.294Z","dependent_packages_count":59,"downloads":null,"downloads_period":null,"dependent_repos_count":177,"rankings":{"downloads":null,"dependent_repos_count":1.2492987096257113,"dependent_packages_count":1.237877694958724,"stargazers_count":3.9941492345916485,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":2.23015348240763},"purl":"pkg:maven/org.hibernate/hibernate-vibur","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-vibur","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-vibur","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-vibur/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-vibur/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-vibur/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-vibur/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-vibur/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-vibur/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-vibur/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932164,"name":"org.hibernate:hibernate-community-dialects","ecosystem":"maven","description":"The `hibernate-community-dialects` module has been relocated to the `org.hibernate.orm` group","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":228,"first_release_published_at":"2021-08-04T13:11:04.000Z","latest_release_published_at":"2026-05-10T00:21:51.000Z","latest_release_number":"7.3.4.Final","last_synced_at":"2026-06-16T15:21:32.658Z","created_at":"2022-07-27T03:10:28.547Z","updated_at":"2026-06-16T15:21:32.659Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-community-dialects/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-community-dialects/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.545Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":1,"rankings":{"downloads":null,"dependent_repos_count":20.645187144345595,"dependent_packages_count":49.884988378616654,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":19.242005289733108},"purl":"pkg:maven/org.hibernate/hibernate-community-dialects","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-community-dialects","docker_dependents_count":6,"docker_downloads_count":15088,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-community-dialects","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-community-dialects/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-community-dialects/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-community-dialects/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-community-dialects/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-community-dialects/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-community-dialects/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-community-dialects/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11772216,"name":"org.hibernate.orm:hibernate-maven-plugin","ecosystem":"maven","description":"Maven plugin to integrate aspects of Hibernate into your build.","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":66,"first_release_published_at":"2024-11-13T13:51:18.000Z","latest_release_published_at":"2026-05-10T00:21:51.000Z","latest_release_number":"7.3.4.Final","last_synced_at":"2026-06-15T01:33:25.285Z","created_at":"2025-06-07T21:17:18.333Z","updated_at":"2026-06-15T01:33:25.285Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-maven-plugin/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-maven-plugin/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.586Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":34.026626466074966,"dependent_packages_count":48.64554336343237,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":41.33608491475367},"purl":"pkg:maven/org.hibernate.orm/hibernate-maven-plugin","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-maven-plugin","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-maven-plugin","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-maven-plugin/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-maven-plugin/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-maven-plugin/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-maven-plugin/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-maven-plugin/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-maven-plugin/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-maven-plugin/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932082,"name":"org.hibernate.orm:hibernate-graalvm","ecosystem":"maven","description":"Experimental extension to make it easier to compile applications into a GraalVM native image","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":224,"first_release_published_at":"2020-04-24T19:12:47.000Z","latest_release_published_at":"2026-05-07T13:45:49.000Z","latest_release_number":"7.4.0.CR1","last_synced_at":"2026-06-18T16:02:36.010Z","created_at":"2022-07-27T03:09:52.308Z","updated_at":"2026-06-18T16:02:36.011Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-graalvm/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-graalvm/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.576Z","dependent_packages_count":11,"downloads":null,"downloads_period":null,"dependent_repos_count":2,"rankings":{"downloads":null,"dependent_repos_count":15.992826801314418,"dependent_packages_count":6.582712190430392,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":7.253346156928749},"purl":"pkg:maven/org.hibernate.orm/hibernate-graalvm","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-graalvm","docker_dependents_count":1,"docker_downloads_count":15,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-graalvm","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-graalvm/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-graalvm/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-graalvm/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-graalvm/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-graalvm/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-graalvm/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-graalvm/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932089,"name":"org.hibernate.orm:hibernate-jipijapa","ecosystem":"maven","description":"Integrate with WildFly JipiJapa","homepage":"http://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":4,"first_release_published_at":"2018-12-06T17:07:08.000Z","latest_release_published_at":"2019-12-20T13:51:45.000Z","latest_release_number":"6.0.0.Alpha4","last_synced_at":"2026-06-16T23:02:21.825Z","created_at":"2022-07-27T03:09:53.270Z","updated_at":"2026-06-16T23:02:21.825Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-jipijapa/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-jipijapa/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.164Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":48.85985838769028,"stargazers_count":null,"forks_count":null,"average":40.41990116431883},"purl":"pkg:maven/org.hibernate.orm/hibernate-jipijapa","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-jipijapa","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-jipijapa","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-jipijapa/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jipijapa/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jipijapa/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jipijapa/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jipijapa/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jipijapa/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jipijapa/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5081185,"name":"org.hibernate:hibernate-jpamodelgen-jakarta","ecosystem":"maven","description":"Annotation Processor to generate JPA 3 static metamodel classes","homepage":"https://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":31,"first_release_published_at":"2021-04-30T12:27:17.000Z","latest_release_published_at":"2021-08-04T13:49:23.000Z","latest_release_number":"5.5.6","last_synced_at":"2026-06-12T18:32:31.566Z","created_at":"2022-07-28T20:06:08.913Z","updated_at":"2026-06-12T18:32:31.566Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-jpamodelgen-jakarta/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-jpamodelgen-jakarta/","metadata":{},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.760Z","dependent_packages_count":8,"downloads":null,"downloads_period":null,"dependent_repos_count":24,"rankings":{"downloads":null,"dependent_repos_count":4.770177125911677,"dependent_packages_count":7.340506532018915,"stargazers_count":3.9941492345916485,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":4.636030295744169},"purl":"pkg:maven/org.hibernate/hibernate-jpamodelgen-jakarta","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-jpamodelgen-jakarta","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-jpamodelgen-jakarta","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-jpamodelgen-jakarta/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jpamodelgen-jakarta/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jpamodelgen-jakarta/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jpamodelgen-jakarta/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jpamodelgen-jakarta/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jpamodelgen-jakarta/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jpamodelgen-jakarta/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5081194,"name":"org.hibernate:hibernate-orm-modules","ecosystem":"maven","description":"Hibernate ORM modules for WildFly 11","homepage":"http://hibernate.org","licenses":"GNU Lesser General Public License","normalized_licenses":["LGPL-2.1+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":35,"first_release_published_at":"2016-06-30T18:31:58.000Z","latest_release_published_at":"2018-11-29T01:29:04.000Z","latest_release_number":"5.1.17.Final","last_synced_at":"2026-06-12T19:01:45.759Z","created_at":"2022-07-28T20:06:43.546Z","updated_at":"2026-06-12T19:01:45.760Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-orm-modules/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-orm-modules/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:14.240Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":3,"rankings":{"downloads":null,"dependent_repos_count":13.663340546605754,"dependent_packages_count":49.884988378616654,"stargazers_count":3.9941492345916485,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":17.495441612567124},"purl":"pkg:maven/org.hibernate/hibernate-orm-modules","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-orm-modules","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-orm-modules","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-orm-modules/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-orm-modules/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-orm-modules/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-orm-modules/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-orm-modules/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-orm-modules/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-orm-modules/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932112,"name":"org.hibernate.orm:hibernate-jcache","ecosystem":"maven","description":"Integration for javax.cache into Hibernate as a second-level caching service","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":224,"first_release_published_at":"2019-11-23T15:46:51.000Z","latest_release_published_at":"2026-04-20T15:33:40.000Z","latest_release_number":"7.3.2.Final","last_synced_at":"2026-06-12T19:31:12.675Z","created_at":"2022-07-27T03:10:06.084Z","updated_at":"2026-06-12T19:31:12.675Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-jcache/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-jcache/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:11.935Z","dependent_packages_count":19,"downloads":null,"downloads_period":null,"dependent_repos_count":225,"rankings":{"downloads":null,"dependent_repos_count":1.0591488338542918,"dependent_packages_count":8.262202452512623,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":3.939799230584275},"purl":"pkg:maven/org.hibernate.orm/hibernate-jcache","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-jcache","docker_dependents_count":3,"docker_downloads_count":647306,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-jcache","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-jcache/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jcache/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jcache/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jcache/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jcache/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jcache/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jcache/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5987190,"name":"org.hibernate:hibernate-envers","ecosystem":"maven","description":"The `hibernate-envers` module has been relocated to the `org.hibernate.orm` group","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":525,"first_release_published_at":"2009-08-20T02:37:47.000Z","latest_release_published_at":"2021-08-04T13:48:58.000Z","latest_release_number":"5.5.6","last_synced_at":"2026-06-18T04:30:50.716Z","created_at":"2023-01-26T17:07:16.940Z","updated_at":"2026-06-18T04:30:50.716Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-envers/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-envers/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:11.935Z","dependent_packages_count":291,"downloads":null,"downloads_period":null,"dependent_repos_count":11896,"rankings":{"downloads":null,"dependent_repos_count":0.06872645668029173,"dependent_packages_count":0.2789132002885309,"stargazers_count":3.9941492345916485,"forks_count":2.439288290454436,"docker_downloads_count":2.1373326921535627,"average":1.7836819748336938},"purl":"pkg:maven/org.hibernate/hibernate-envers","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-envers","docker_dependents_count":823,"docker_downloads_count":483574711,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-envers","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-envers/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":true,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-envers/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-envers/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-envers/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-envers/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-envers/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-envers/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5063156,"name":"org.hibernate:hibernate-micrometer","ecosystem":"maven","description":"The `hibernate-micrometer` module has been relocated to the `org.hibernate.orm` group","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":268,"first_release_published_at":"2020-12-14T17:08:28.000Z","latest_release_published_at":"2021-08-04T13:49:25.000Z","latest_release_number":"5.5.6","last_synced_at":"2026-05-12T14:21:41.927Z","created_at":"2022-07-28T04:09:21.403Z","updated_at":"2026-05-12T14:21:41.927Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-micrometer/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-micrometer/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:11.923Z","dependent_packages_count":27,"downloads":null,"downloads_period":null,"dependent_repos_count":20,"rankings":{"downloads":null,"dependent_repos_count":5.315380299751543,"dependent_packages_count":2.8664743127354333,"stargazers_count":4.15965376292378,"forks_count":2.454115572653683,"docker_downloads_count":null,"average":3.6989059870161096},"purl":"pkg:maven/org.hibernate/hibernate-micrometer","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-micrometer","docker_dependents_count":6,"docker_downloads_count":66484675,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-micrometer","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-micrometer/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-micrometer/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-micrometer/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-micrometer/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-micrometer/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-micrometer/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-micrometer/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932092,"name":"org.hibernate.orm:hibernate-c3p0","ecosystem":"maven","description":"Integration for c3p0 Connection pooling into Hibernate ORM","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":227,"first_release_published_at":"2018-12-06T17:06:47.000Z","latest_release_published_at":"2026-04-20T15:33:40.000Z","latest_release_number":"7.3.2.Final","last_synced_at":"2026-06-18T16:02:36.630Z","created_at":"2022-07-27T03:09:54.172Z","updated_at":"2026-06-18T16:02:36.630Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-c3p0/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-c3p0/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.707Z","dependent_packages_count":4,"downloads":null,"downloads_period":null,"dependent_repos_count":28,"rankings":{"downloads":null,"dependent_repos_count":4.340987416846998,"dependent_packages_count":22.91576500761401,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":5.400336619379659,"average":7.81898693596217},"purl":"pkg:maven/org.hibernate.orm/hibernate-c3p0","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-c3p0","docker_dependents_count":1,"docker_downloads_count":27,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-c3p0","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-c3p0/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-c3p0/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-c3p0/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-c3p0/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-c3p0/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-c3p0/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-c3p0/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4715683,"name":"com.google.code.maven-play-plugin.org.hibernate:hibernate-core","ecosystem":"maven","description":"The core O/RM functionality as provided by Hibernate","homepage":"http://hibernate.org","licenses":"GNU Lesser General Public License","normalized_licenses":["LGPL-2.1+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"com.google.code.maven-play-plugin.org.hibernate","versions_count":8,"first_release_published_at":"2013-01-09T07:20:41.000Z","latest_release_published_at":"2017-10-18T19:09:27.000Z","latest_release_number":"5.2.10.Final-patched-play-1.5.0","last_synced_at":"2026-06-15T01:02:21.622Z","created_at":"2022-07-25T21:54:27.007Z","updated_at":"2026-06-15T01:02:21.622Z","registry_url":"https://central.sonatype.com/artifact/com.google.code.maven-play-plugin.org.hibernate/hibernate-core/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.google.code.maven-play-plugin.org.hibernate/hibernate-core/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.550Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":5,"rankings":{"downloads":null,"dependent_repos_count":10.821110843952873,"dependent_packages_count":32.73282840426385,"stargazers_count":3.9981566081590127,"forks_count":2.4509096737997917,"docker_downloads_count":null,"average":12.500751382543882},"purl":"pkg:maven/com.google.code.maven-play-plugin.org.hibernate/hibernate-core","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.google.code.maven-play-plugin.org.hibernate:hibernate-core","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.google.code.maven-play-plugin.org.hibernate:hibernate-core","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.google.code.maven-play-plugin.org.hibernate:hibernate-core/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.code.maven-play-plugin.org.hibernate:hibernate-core/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.code.maven-play-plugin.org.hibernate:hibernate-core/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.code.maven-play-plugin.org.hibernate:hibernate-core/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.code.maven-play-plugin.org.hibernate:hibernate-core/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.code.maven-play-plugin.org.hibernate:hibernate-core/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.code.maven-play-plugin.org.hibernate:hibernate-core/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932129,"name":"org.hibernate.orm:hibernate-vibur","ecosystem":"maven","description":"Integration for Vibur Connection pooling as a Hibernate ORM ConnectionProvider","homepage":"https://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":163,"first_release_published_at":"2018-12-06T17:06:44.000Z","latest_release_published_at":"2026-05-03T00:18:11.000Z","latest_release_number":"6.6.50.Final","last_synced_at":"2026-06-12T23:15:39.561Z","created_at":"2022-07-27T03:10:12.354Z","updated_at":"2026-06-12T23:15:39.562Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-vibur/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-vibur/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:14.213Z","dependent_packages_count":2,"downloads":null,"downloads_period":null,"dependent_repos_count":1,"rankings":{"downloads":null,"dependent_repos_count":20.645187144345595,"dependent_packages_count":32.73282840426385,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":14.953965296144908},"purl":"pkg:maven/org.hibernate.orm/hibernate-vibur","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-vibur","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-vibur","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-vibur/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-vibur/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-vibur/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-vibur/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-vibur/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-vibur/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-vibur/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932125,"name":"org.hibernate.orm:hibernate-spatial","ecosystem":"maven","description":"Integrate support for Spatial/GIS data into Hibernate O/RM","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":218,"first_release_published_at":"2021-10-11T20:57:42.000Z","latest_release_published_at":"2026-04-20T15:33:40.000Z","latest_release_number":"7.3.2.Final","last_synced_at":"2026-05-12T14:22:22.551Z","created_at":"2022-07-27T03:10:09.765Z","updated_at":"2026-05-12T14:22:22.551Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-spatial/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-spatial/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.004Z","dependent_packages_count":2,"downloads":null,"downloads_period":null,"dependent_repos_count":5,"rankings":{"downloads":null,"dependent_repos_count":10.821110843952873,"dependent_packages_count":32.73282840426385,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":12.497946221046726},"purl":"pkg:maven/org.hibernate.orm/hibernate-spatial","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-spatial","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-spatial","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-spatial/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-spatial/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-spatial/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-spatial/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-spatial/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-spatial/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-spatial/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5093639,"name":"org.hibernate.orm.tooling:hibernate-enhance-maven-plugin","ecosystem":"maven","description":"Enhance Plugin of the Hibernate project for use with Maven build system.","homepage":"https://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm.tooling","versions_count":350,"first_release_published_at":"2014-02-27T01:26:31.000Z","latest_release_published_at":"2021-08-04T13:48:53.000Z","latest_release_number":"5.5.6","last_synced_at":"2026-06-17T03:00:59.249Z","created_at":"2022-07-29T14:53:00.880Z","updated_at":"2026-06-17T03:00:59.249Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm.tooling/hibernate-enhance-maven-plugin/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm.tooling/hibernate-enhance-maven-plugin/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:14.675Z","dependent_packages_count":3,"downloads":null,"downloads_period":null,"dependent_repos_count":292,"rankings":{"downloads":null,"dependent_repos_count":0.8764125991824958,"dependent_packages_count":17.33189067884908,"stargazers_count":3.9941492345916485,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":6.160435200769415},"purl":"pkg:maven/org.hibernate.orm.tooling/hibernate-enhance-maven-plugin","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm.tooling:hibernate-enhance-maven-plugin","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm.tooling:hibernate-enhance-maven-plugin","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm.tooling:hibernate-enhance-maven-plugin/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm.tooling:hibernate-enhance-maven-plugin/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm.tooling:hibernate-enhance-maven-plugin/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm.tooling:hibernate-enhance-maven-plugin/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm.tooling:hibernate-enhance-maven-plugin/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm.tooling:hibernate-enhance-maven-plugin/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm.tooling:hibernate-enhance-maven-plugin/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932145,"name":"org.hibernate.orm:hibernate-proxool","ecosystem":"maven","description":"Integration for Proxool Connection pooling into Hibernate O/RM","homepage":"https://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":163,"first_release_published_at":"2018-12-06T17:07:07.000Z","latest_release_published_at":"2026-05-03T00:18:11.000Z","latest_release_number":"6.6.50.Final","last_synced_at":"2026-05-12T14:22:48.911Z","created_at":"2022-07-27T03:10:19.128Z","updated_at":"2026-05-12T14:22:48.911Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-proxool/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-proxool/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:14.226Z","dependent_packages_count":2,"downloads":null,"downloads_period":null,"dependent_repos_count":1,"rankings":{"downloads":null,"dependent_repos_count":20.645187144345595,"dependent_packages_count":32.73282840426385,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":14.953965296144908},"purl":"pkg:maven/org.hibernate.orm/hibernate-proxool","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-proxool","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-proxool","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-proxool/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-proxool/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-proxool/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-proxool/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-proxool/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-proxool/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-proxool/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5081187,"name":"org.hibernate:hibernate-graalvm","ecosystem":"maven","description":"The `hibernate-graalvm` module has been relocated to the `org.hibernate.orm` group","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":284,"first_release_published_at":"2020-02-13T18:24:25.000Z","latest_release_published_at":"2021-08-04T13:49:09.000Z","latest_release_number":"5.5.6","last_synced_at":"2026-05-12T14:22:55.945Z","created_at":"2022-07-28T20:06:18.207Z","updated_at":"2026-05-12T14:22:55.945Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-graalvm/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-graalvm/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.113Z","dependent_packages_count":5,"downloads":null,"downloads_period":null,"dependent_repos_count":113,"rankings":{"downloads":null,"dependent_repos_count":1.7416045523763726,"dependent_packages_count":11.32283401458684,"stargazers_count":3.9941492345916485,"forks_count":2.439288290454436,"docker_downloads_count":5.752384387272581,"average":5.050052095856375},"purl":"pkg:maven/org.hibernate/hibernate-graalvm","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-graalvm","docker_dependents_count":449,"docker_downloads_count":3977115,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-graalvm","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-graalvm/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-graalvm/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-graalvm/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-graalvm/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-graalvm/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-graalvm/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-graalvm/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5083660,"name":"org.hibernate:hibernate-java8","ecosystem":"maven","description":"Hibernate ORM 6.0.0.Alpha7 release. See http://hibernate.org/orm/releases/6.0","homepage":"http://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":173,"first_release_published_at":"2015-03-31T20:25:50.000Z","latest_release_published_at":"2021-08-04T13:49:15.000Z","latest_release_number":"5.5.6","last_synced_at":"2026-05-12T14:23:02.012Z","created_at":"2022-07-28T23:41:27.663Z","updated_at":"2026-05-12T14:23:02.013Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-java8/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-java8/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:14.511Z","dependent_packages_count":134,"downloads":null,"downloads_period":null,"dependent_repos_count":4135,"rankings":{"downloads":null,"dependent_repos_count":0.14847319067083434,"dependent_packages_count":0.5698485212791536,"stargazers_count":3.9941492345916485,"forks_count":2.439288290454436,"docker_downloads_count":5.400336619379659,"average":2.5104191712751462},"purl":"pkg:maven/org.hibernate/hibernate-java8","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-java8","docker_dependents_count":129,"docker_downloads_count":264008646,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-java8","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-java8/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-java8/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-java8/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-java8/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-java8/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-java8/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-java8/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932094,"name":"org.hibernate.orm:hibernate-hikaricp","ecosystem":"maven","description":"Integration for HikariCP into Hibernate O/RM","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":236,"first_release_published_at":"2018-12-06T17:06:44.000Z","latest_release_published_at":"2026-05-10T00:21:51.000Z","latest_release_number":"7.3.4.Final","last_synced_at":"2026-06-17T14:23:27.521Z","created_at":"2022-07-27T03:09:56.009Z","updated_at":"2026-06-17T14:23:27.521Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-hikaricp/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-hikaricp/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:12.209Z","dependent_packages_count":16,"downloads":null,"downloads_period":null,"dependent_repos_count":22,"rankings":{"downloads":null,"dependent_repos_count":5.0420774224573215,"dependent_packages_count":5.47347118698405,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":4.23834856135289},"purl":"pkg:maven/org.hibernate.orm/hibernate-hikaricp","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-hikaricp","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-hikaricp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-hikaricp/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-hikaricp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-hikaricp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-hikaricp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-hikaricp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-hikaricp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-hikaricp/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5424214,"name":"org.hibernate:hibernate-proxool","ecosystem":"maven","description":"Integration for Proxool Connection pooling into Hibernate O/RM","homepage":"https://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":442,"first_release_published_at":"2008-10-28T01:48:45.000Z","latest_release_published_at":"2021-08-04T13:49:29.000Z","latest_release_number":"5.5.6","last_synced_at":"2026-05-05T09:31:38.095Z","created_at":"2022-11-15T14:07:59.796Z","updated_at":"2026-05-05T09:31:38.096Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-proxool/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-proxool/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:14.289Z","dependent_packages_count":72,"downloads":null,"downloads_period":null,"dependent_repos_count":1343,"rankings":{"downloads":null,"dependent_repos_count":0.3203895167107478,"dependent_packages_count":1.0300953754909032,"stargazers_count":3.9941492345916485,"forks_count":2.439288290454436,"docker_downloads_count":2.0357457722208863,"average":1.9639336378937244},"purl":"pkg:maven/org.hibernate/hibernate-proxool","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-proxool","docker_dependents_count":25,"docker_downloads_count":516474,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-proxool","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-proxool/dependencies","status":"removed","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-proxool/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-proxool/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-proxool/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-proxool/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-proxool/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-proxool/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11772052,"name":"org.hibernate.orm:hibernate-vector","ecosystem":"maven","description":"Hibernate's extensions for vector support","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":141,"first_release_published_at":"2023-11-23T14:28:16.000Z","latest_release_published_at":"2026-04-20T15:33:40.000Z","latest_release_number":"7.3.2.Final","last_synced_at":"2026-06-18T01:47:09.190Z","created_at":"2025-06-07T21:14:40.017Z","updated_at":"2026-06-18T01:47:09.190Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-vector/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-vector/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.758Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":34.026626466074966,"dependent_packages_count":48.64554336343237,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":41.33608491475367},"purl":"pkg:maven/org.hibernate.orm/hibernate-vector","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-vector","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-vector","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-vector/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-vector/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-vector/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-vector/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-vector/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-vector/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-vector/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932086,"name":"org.hibernate.orm:hibernate-jpamodelgen-jakarta","ecosystem":"maven","description":"Annotation Processor to generate JPA 3 static metamodel classes","homepage":"https://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":1,"first_release_published_at":"2021-08-04T13:11:12.000Z","latest_release_published_at":"2021-08-04T13:11:12.000Z","latest_release_number":"6.0.0.Alpha9","last_synced_at":"2026-05-10T12:50:17.198Z","created_at":"2022-07-27T03:09:52.920Z","updated_at":"2026-05-10T12:50:17.198Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-jpamodelgen-jakarta/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-jpamodelgen-jakarta/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.511Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":48.85985838769028,"stargazers_count":null,"forks_count":null,"average":40.41990116431883},"purl":"pkg:maven/org.hibernate.orm/hibernate-jpamodelgen-jakarta","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-jpamodelgen-jakarta","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-jpamodelgen-jakarta","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-jpamodelgen-jakarta/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jpamodelgen-jakarta/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jpamodelgen-jakarta/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jpamodelgen-jakarta/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jpamodelgen-jakarta/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jpamodelgen-jakarta/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-jpamodelgen-jakarta/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11614569,"name":"org.hibernate.orm:hibernate-platform","ecosystem":"maven","description":"Platform (BOM) for Hibernate ORM dependencies","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":195,"first_release_published_at":"2023-05-18T13:38:30.000Z","latest_release_published_at":"2026-05-03T00:45:10.000Z","latest_release_number":"7.1.25.Final","last_synced_at":"2026-06-10T13:16:51.628Z","created_at":"2025-05-07T19:03:37.145Z","updated_at":"2026-06-10T13:16:51.628Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-platform/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-platform/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.251Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":35.02670029587619,"dependent_packages_count":50.08195615246622,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":42.5543282241712},"purl":"pkg:maven/org.hibernate.orm/hibernate-platform","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-platform","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-platform","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-platform/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-platform/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-platform/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-platform/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-platform/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-platform/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-platform/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932179,"name":"org.hibernate:hibernate-core-jakarta","ecosystem":"maven","description":"Hibernate O/RM implementation of the Jakarta Persistence specification","homepage":"https://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":31,"first_release_published_at":"2021-04-30T12:26:35.000Z","latest_release_published_at":"2021-08-04T13:48:46.000Z","latest_release_number":"5.5.6","last_synced_at":"2026-06-16T04:01:44.558Z","created_at":"2022-07-27T03:10:45.363Z","updated_at":"2026-06-16T04:01:44.558Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-core-jakarta/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-core-jakarta/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.113Z","dependent_packages_count":59,"downloads":null,"downloads_period":null,"dependent_repos_count":269,"rankings":{"downloads":null,"dependent_repos_count":0.9331169351606957,"dependent_packages_count":1.4075899655365873,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":2.1946381341668673},"purl":"pkg:maven/org.hibernate/hibernate-core-jakarta","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-core-jakarta","docker_dependents_count":17,"docker_downloads_count":607,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-core-jakarta","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-core-jakarta/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-core-jakarta/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-core-jakarta/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-core-jakarta/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-core-jakarta/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-core-jakarta/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-core-jakarta/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932084,"name":"org.hibernate.orm:hibernate-micrometer","ecosystem":"maven","description":"Integration for Micrometer metrics into Hibernate as a metrics collection package","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":230,"first_release_published_at":"2021-03-18T21:20:44.000Z","latest_release_published_at":"2026-05-10T00:21:51.000Z","latest_release_number":"7.3.4.Final","last_synced_at":"2026-06-15T16:41:53.263Z","created_at":"2022-07-27T03:09:52.497Z","updated_at":"2026-06-15T16:41:53.263Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-micrometer/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-micrometer/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.753Z","dependent_packages_count":3,"downloads":null,"downloads_period":null,"dependent_repos_count":1,"rankings":{"downloads":null,"dependent_repos_count":20.645187144345595,"dependent_packages_count":32.73282840426385,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":14.953965296144908},"purl":"pkg:maven/org.hibernate.orm/hibernate-micrometer","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-micrometer","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-micrometer","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-micrometer/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-micrometer/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-micrometer/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-micrometer/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-micrometer/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-micrometer/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-micrometer/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932083,"name":"org.hibernate.orm:hibernate-entitymanager","ecosystem":"maven","description":"Hibernate ORM 6.0.0.Alpha7 release. See http://hibernate.org/orm/releases/6.0","homepage":"http://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":5,"first_release_published_at":"2019-11-23T15:46:28.000Z","latest_release_published_at":"2021-03-18T21:20:08.000Z","latest_release_number":"6.0.0.Alpha7","last_synced_at":"2026-06-12T22:48:20.574Z","created_at":"2022-07-27T03:09:52.466Z","updated_at":"2026-06-12T22:48:20.574Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-entitymanager/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-entitymanager/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:12.661Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":29,"rankings":{"downloads":null,"dependent_repos_count":4.254628516470305,"dependent_packages_count":49.884988378616654,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":15.144365632764286},"purl":"pkg:maven/org.hibernate.orm/hibernate-entitymanager","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-entitymanager","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-entitymanager","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-entitymanager/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-entitymanager/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-entitymanager/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-entitymanager/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-entitymanager/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-entitymanager/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-entitymanager/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932159,"name":"org.hibernate:hibernate-ant","ecosystem":"maven","description":"The `hibernate-ant` module has been relocated to the `org.hibernate.orm` group","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":227,"first_release_published_at":"2021-10-11T20:56:25.000Z","latest_release_published_at":"2026-05-10T00:21:51.000Z","latest_release_number":"7.3.4.Final","last_synced_at":"2026-06-13T21:39:48.660Z","created_at":"2022-07-27T03:10:25.931Z","updated_at":"2026-06-13T21:39:48.661Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-ant/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-ant/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.764Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":48.85985838769028,"stargazers_count":null,"forks_count":null,"average":40.41990116431883},"purl":"pkg:maven/org.hibernate/hibernate-ant","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-ant","docker_dependents_count":2,"docker_downloads_count":90,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-ant","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-ant/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-ant/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-ant/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-ant/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-ant/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-ant/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-ant/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11824548,"name":"org.hibernate:hibernate-jfr","ecosystem":"maven","description":"The `hibernate-jfr` module has been relocated to the `org.hibernate.orm` group","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":149,"first_release_published_at":"2023-11-23T14:26:02.000Z","latest_release_published_at":"2026-05-10T00:21:51.000Z","latest_release_number":"7.3.4.Final","last_synced_at":"2026-06-13T23:30:08.004Z","created_at":"2025-06-22T00:31:02.028Z","updated_at":"2026-06-13T23:30:08.005Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-jfr/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-jfr/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.527Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.67413128002411,"dependent_packages_count":48.14160507629321,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.907868178158665},"purl":"pkg:maven/org.hibernate/hibernate-jfr","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-jfr","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-jfr","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-jfr/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jfr/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jfr/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jfr/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jfr/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jfr/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jfr/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932141,"name":"org.hibernate.orm:hibernate-testing","ecosystem":"maven","description":"Support for testing Hibernate ORM functionality","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate.orm","versions_count":236,"first_release_published_at":"2018-12-06T17:06:48.000Z","latest_release_published_at":"2026-05-10T00:21:51.000Z","latest_release_number":"7.3.4.Final","last_synced_at":"2026-06-14T04:02:31.355Z","created_at":"2022-07-27T03:10:17.172Z","updated_at":"2026-06-14T04:02:31.356Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate.orm/hibernate-testing/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate.orm/hibernate-testing/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.698Z","dependent_packages_count":9,"downloads":null,"downloads_period":null,"dependent_repos_count":48,"rankings":{"downloads":null,"dependent_repos_count":3.078264005770618,"dependent_packages_count":11.32283401458684,"stargazers_count":3.9985573455157493,"forks_count":2.439288290454436,"docker_downloads_count":null,"average":5.209735914081911},"purl":"pkg:maven/org.hibernate.orm/hibernate-testing","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-testing","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate.orm:hibernate-testing","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate.orm:hibernate-testing/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-testing/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-testing/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-testing/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-testing/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-testing/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate.orm:hibernate-testing/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5431667,"name":"org.hibernate:hibernate-testing","ecosystem":"maven","description":"The `hibernate-testing` module has been relocated to the `org.hibernate.orm` group","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":535,"first_release_published_at":"2008-04-28T16:51:57.000Z","latest_release_published_at":"2021-08-04T13:49:38.000Z","latest_release_number":"5.5.6","last_synced_at":"2026-06-18T19:01:39.221Z","created_at":"2022-11-16T04:27:54.282Z","updated_at":"2026-06-18T19:01:39.222Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-testing/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-testing/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.708Z","dependent_packages_count":118,"downloads":null,"downloads_period":null,"dependent_repos_count":975,"rankings":{"downloads":null,"dependent_repos_count":0.39091929149635324,"dependent_packages_count":0.6455878817023323,"stargazers_count":3.9941492345916485,"forks_count":2.439288290454436,"docker_downloads_count":2.1381341668670353,"average":1.921615773022361},"purl":"pkg:maven/org.hibernate/hibernate-testing","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-testing","docker_dependents_count":20,"docker_downloads_count":428331,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-testing","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-testing/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-testing/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-testing/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-testing/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-testing/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-testing/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-testing/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4932176,"name":"org.hibernate:hibernate-enhance-maven-plugin","ecosystem":"maven","description":"Enhance Plugin of the Hibernate project for use with Maven build system.","homepage":"https://hibernate.org/orm","licenses":"GNU Library General Public License v2.1 or later","normalized_licenses":["LGPL-2.0","GPL-2.0+"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":163,"first_release_published_at":"2019-11-23T15:46:28.000Z","latest_release_published_at":"2026-06-09T07:17:13.000Z","latest_release_number":"6.6.53.Final","last_synced_at":"2026-06-14T14:40:40.846Z","created_at":"2022-07-27T03:10:41.016Z","updated_at":"2026-06-14T14:40:40.847Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-enhance-maven-plugin/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-enhance-maven-plugin/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:14.314Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":48.85985838769028,"stargazers_count":null,"forks_count":null,"average":40.41990116431883},"purl":"pkg:maven/org.hibernate/hibernate-enhance-maven-plugin","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-enhance-maven-plugin","docker_dependents_count":1,"docker_downloads_count":21,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-enhance-maven-plugin","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-enhance-maven-plugin/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-enhance-maven-plugin/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-enhance-maven-plugin/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-enhance-maven-plugin/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-enhance-maven-plugin/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-enhance-maven-plugin/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-enhance-maven-plugin/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5108273,"name":"org.hibernate:hibernate-jcache","ecosystem":"maven","description":"The `hibernate-jcache` module has been relocated to the `org.hibernate.orm` group","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":383,"first_release_published_at":"2016-06-02T04:18:48.000Z","latest_release_published_at":"2021-08-04T13:49:18.000Z","latest_release_number":"5.5.6","last_synced_at":"2026-06-14T15:22:17.071Z","created_at":"2022-07-30T09:15:20.825Z","updated_at":"2026-06-14T15:22:17.072Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-jcache/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-jcache/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:13.015Z","dependent_packages_count":157,"downloads":null,"downloads_period":null,"dependent_repos_count":7541,"rankings":{"downloads":null,"dependent_repos_count":0.09978360182736234,"dependent_packages_count":0.48549330768614246,"stargazers_count":3.9941492345916485,"forks_count":2.439288290454436,"docker_downloads_count":5.91147711789693,"average":2.5860383104913036},"purl":"pkg:maven/org.hibernate/hibernate-jcache","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-jcache","docker_dependents_count":221,"docker_downloads_count":42259459,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-jcache","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-jcache/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":true,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jcache/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jcache/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jcache/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jcache/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jcache/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jcache/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5427201,"name":"org.hibernate:hibernate-jpamodelgen","ecosystem":"maven","description":"The `hibernate-jpamodelgen` module has been renamed `hibernate-processor` and moved to the `org.hibernate.orm` group-id","homepage":"https://hibernate.org/orm","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/hibernate/hibernate-orm","keywords_array":[],"namespace":"org.hibernate","versions_count":438,"first_release_published_at":"2009-12-08T23:04:48.000Z","latest_release_published_at":"2021-08-04T13:49:21.000Z","latest_release_number":"5.5.6","last_synced_at":"2026-06-19T01:30:19.385Z","created_at":"2022-11-15T19:32:20.435Z","updated_at":"2026-06-19T01:30:19.386Z","registry_url":"https://central.sonatype.com/artifact/org.hibernate/hibernate-jpamodelgen/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.hibernate/hibernate-jpamodelgen/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":1099718,"uuid":"961036","full_name":"hibernate/hibernate-orm","owner":"hibernate","description":"Idiomatic persistence for Java and relational databases","archived":false,"fork":false,"pushed_at":"2025-11-07T22:01:19.000Z","size":300845,"stargazers_count":6310,"open_issues_count":130,"forks_count":3701,"subscribers_count":297,"default_branch":"main","last_synced_at":"2025-11-09T20:03:06.697Z","etag":null,"topics":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"latest_commit_sha":null,"homepage":"http://hibernate.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hibernate.png","metadata":{"files":{"readme":"README.adoc","changelog":"changelog.txt","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":null,"dco":"dco.txt","cla":null},"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"created_at":"2010-10-04T16:15:52.000Z","updated_at":"2025-11-09T03:42:48.000Z","dependencies_parsed_at":"2025-10-24T12:36:20.978Z","dependency_job_id":null,"html_url":"https://github.com/hibernate/hibernate-orm","commit_stats":{"total_commits":17049,"total_committers":696,"mean_commits":"24.495689655172413","dds":0.7951199483840694,"last_synced_commit":"e8f2f79236f5b05db449f49eab0d526b19df9ccd"},"previous_names":[],"tags_count":437,"template":false,"template_full_name":null,"purl":"pkg:github/hibernate/hibernate-orm","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","download_url":"https://codeload.github.com/hibernate/hibernate-orm/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/sbom","scorecard":{"id":464003,"data":{"date":"2025-08-11","repo":{"name":"github.com/hibernate/hibernate-orm","commit":"dcc032db6e982b07f5ad3037104b229377bb6a04"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.2,"checks":[{"name":"Code-Review","score":2,"reason":"Found 4/18 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:149","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:255","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:27","Warn: no topLevel permission defined: .github/workflows/ci-report.yml:1","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hibernate/.github/SECURITY.md:1","Info: Found linked content: github.com/hibernate/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hibernate/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hibernate/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(6.6): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: local-build-plugins/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: containerImage not pinned by hash: edb/edb13.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:13.20-3.5-postgis@sha256:61fc3ce3994f80209ea7f4f68948ebcfff0f63889b8c6e32795b2082016ce610","Warn: containerImage not pinned by hash: edb/edb14.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis to quay.io/enterprisedb/edb-postgres-advanced:14.5-3.2-postgis@sha256:e8585294a373444ff0c26886be88209d32a7f48b98e4b8ef075ad81bf4318e21","Warn: containerImage not pinned by hash: edb/edb15.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis to quay.io/enterprisedb/edb-postgres-advanced:15.4-3.3-postgis@sha256:eb89d5b09f45171c0b56951f0dd2c1da5241077c66a1d0442c17a69e3a15c2d4","Warn: containerImage not pinned by hash: edb/edb16.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis to quay.io/enterprisedb/edb-postgres-advanced:16.1-3.4-postgis@sha256:53b83f9c0008911a61e661044b8bc2f4e13faa0eba6886617a6c02fd2b4181cf","Warn: containerImage not pinned by hash: edb/edb17.Dockerfile:1: pin your Docker image by updating quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis to quay.io/enterprisedb/edb-postgres-advanced:17.4-3.5-postgis@sha256:90683b0f8e39cbc054b3ef39376c6153006d4b0e6a1417f96efb2a04b20c8f31","Info:  26 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   5 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T11:57:11.350Z","repository_id":1099718,"created_at":"2025-08-19T11:57:11.350Z","updated_at":"2025-08-19T11:57:11.350Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283571126,"owners_count":26857772,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-09T02:00:05.828Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hibernate","name":"Hibernate","uuid":"348262","kind":"organization","description":"","email":null,"website":"hibernate.org","location":null,"twitter":"Hibernate","company":null,"icon_url":"https://avatars.githubusercontent.com/u/348262?v=4","repositories_count":55,"last_synced_at":"2024-04-14T08:14:54.514Z","metadata":{"has_sponsors_listing":false,"funding":{"github":"commonhaus","open_collective":"commonhaus-foundation"}},"html_url":"https://github.com/hibernate","funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"total_stars":9236,"followers":427,"following":0,"created_at":"2022-11-02T18:11:26.104Z","updated_at":"2024-04-14T08:15:01.863Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hibernate/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-11-09T20:07:14.099Z","dependent_packages_count":268,"downloads":null,"downloads_period":null,"dependent_repos_count":16322,"rankings":{"downloads":null,"dependent_repos_count":0.053498437124308726,"dependent_packages_count":0.29995191151719164,"stargazers_count":3.9941492345916485,"forks_count":2.439288290454436,"docker_downloads_count":2.0682054981165345,"average":1.771018674360824},"purl":"pkg:maven/org.hibernate/hibernate-jpamodelgen","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.hibernate:hibernate-jpamodelgen","docker_dependents_count":214,"docker_downloads_count":7764683,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.hibernate:hibernate-jpamodelgen","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.hibernate:hibernate-jpamodelgen/dependencies","status":null,"funding_links":["https://github.com/sponsors/commonhaus","https://opencollective.com/commonhaus-foundation"],"critical":true,"issue_metadata":{"last_synced_at":"2025-11-09T20:07:05.626Z","issues_count":25,"pull_requests_count":5639,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7604288.969500325,"issues_closed_count":23,"pull_requests_closed_count":4623,"pull_request_authors_count":347,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.1610214577052669,"merged_pull_requests_count":3668,"bot_issues_count":0,"bot_pull_requests_count":42,"past_year_issues_count":12,"past_year_pull_requests_count":2709,"past_year_avg_time_to_close_issue":611981.1,"past_year_avg_time_to_close_pull_request":462688.1986660315,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":2099,"past_year_pull_request_authors_count":125,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9080841638981174,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":21,"past_year_merged_pull_requests_count":1838,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","maintainers":[{"login":"gavinking","count":1801,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"dreab8","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"beikov","count":252,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"sebersole","count":212,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"marko-bekhta","count":195,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"yrodiere","count":191,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"},{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"},{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"},{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}],"active_maintainers":[{"login":"gavinking","count":1061,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"},{"login":"beikov","count":248,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"},{"login":"marko-bekhta","count":146,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"},{"login":"sebersole","count":120,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"},{"login":"dreab8","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"},{"login":"yrodiere","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"},{"login":"mbellade","count":77,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"},{"login":"jrenaat","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"},{"login":"mbladel","count":62,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"},{"login":"Sanne","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"},{"login":"scottmarlow","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"},{"login":"DavideD","count":21,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"},{"login":"maesenka","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"},{"login":"koentsje","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"},{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jpamodelgen/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jpamodelgen/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jpamodelgen/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jpamodelgen/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jpamodelgen/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.hibernate:hibernate-jpamodelgen/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}}],"commits":{"id":18305,"full_name":"hibernate/hibernate-orm","default_branch":"main","total_commits":28617,"total_committers":841,"total_bot_commits":81,"total_bot_committers":1,"mean_commits":34.02734839476813,"dds":0.8268162281161547,"past_year_total_commits":3387,"past_year_total_committers":108,"past_year_total_bot_commits":35,"past_year_total_bot_committers":1,"past_year_mean_commits":31.36111111111111,"past_year_dds":0.5615589016829052,"last_synced_at":"2026-06-18T11:45:06.868Z","last_synced_commit":"4929566e6c078b021b43dbac233c3653b97ff1d8","created_at":"2023-03-07T11:37:45.216Z","updated_at":"2026-06-18T10:54:36.107Z","committers":[{"name":"Gavin King","email":"gavin@hibernate.org","login":"gavinking","count":4956},{"name":"Koen Aers","email":"koen.aers@gmail.com","login":"koentsje","count":4194},{"name":"Steve Ebersole","email":"steve@hibernate.org","login":"sebersole","count":4038},{"name":"Andrea Boriero","email":"andrea@hibernate.org","login":"dreab8","count":2337},{"name":"Christian Beikov","email":"christian.beikov@gmail.com","login":"beikov","count":1679},{"name":"Sanne Grinovero","email":"sanne@hibernate.org","login":"Sanne","count":1087},{"name":"Marco Belladelli","email":"marco@hibernate.org","login":"mbladel","count":856},{"name":"Gail Badner","email":"gail@redhat.com","login":"gbadner","count":846},{"name":"Yoann Rodière","email":"yoann@hibernate.org","login":"yrodiere","count":627},{"name":"Strong Liu","email":"stliu@hibernate.org","login":"stliu","count":569},{"name":"Vlad Mihalcea","email":"mihalcea.vlad@gmail.com","login":"vladmihalcea","count":542},{"name":"Brett Meyer","email":"brmeyer@redhat.com","login":"brmeyer","count":486},{"name":"Hardy Ferentschik","email":"hardy@hibernate.org","login":"hferentschik","count":455},{"name":"Chris Cranford","email":"chris@hibernate.org","login":"Naros","count":403},{"name":"Jan Schatteman","email":"jschatte@redhat.com","login":"jrenaat","count":384},{"name":"Emmanuel Bernard","email":"emmanuel@hibernate.org","login":"emmanuelbernard","count":315},{"name":"marko-bekhta","email":"marko.prykladna@gmail.com","login":"marko-bekhta","count":309},{"name":"Guillaume Smet","email":"guillaume@hibernate.org","login":"gsmet","count":254},{"name":"Adam Warski","email":"adam@warski.org","login":"adamw","count":189},{"name":"Lukasz Antoniak","email":"lukasz.antoniak@gmail.com","login":"lukasz-antoniak","count":186},{"name":"Nathan Xu","email":"nathan.qingyang.xu@gmail.com","login":"NathanQingyangXu","count":182},{"name":"Karel Maesen","email":"karel@geovise.com","login":"maesenka","count":173},{"name":"Hibernate-CI","email":"ci@hibernate.org","login":"Hibernate-CI","count":171},{"name":"Cedomir Igaly","email":"cedomir.igaly@e-dama.net","login":"cigaly","count":159},{"name":"Scott Marlow","email":"smarlow@redhat.com","login":"scottmarlow","count":113},{"name":"Brian Stansberry","email":"brian.stansberry@redhat.com","login":"bstansberry","count":112},{"name":"Davide D'Alto","email":"davide@hibernate.org","login":"DavideD","count":108},{"name":"Luis Barreiro","email":"lbarreiro@redhat.com","login":"barreiro","count":97},{"name":"Galder Zamarreño","email":"galder.zamarreno@redhat.com","login":"galderz","count":96},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":81},{"name":"Yanming Zhou","email":"zhouyanming@gmail.com","login":"quaff","count":69},{"name":"Radim Vansa","email":"rvansa@redhat.com","login":"rvansa","count":65},{"name":"Loïc LEFEVRE","email":"loic.lefevre@gmail.com","login":"loiclefevre","count":60},{"name":"Diego Plentz","email":"diego@plentz.org","login":null,"count":59},{"name":"Emmanuel Jannetti","email":"emmanuel.jannetti@oracle.com","login":"ejannett","count":52},{"name":"Gunnar Morling","email":"gunnar.morling@googlemail.com","login":"gunnarmorling","count":51},{"name":"John Verhaeg","email":"jverhaeg@redhat.com","login":"jpav","count":48},{"name":"Fabio Massimo Ercoli","email":"fabiomassimo.ercoli@gmail.com","login":"fax4ever","count":46},{"name":"Vladimír Kuruc","email":"kuruc.v@chemosvit.sk","login":"VladoKuruc","count":45},{"name":"Juraci Krohling","email":"jcosta@redhat.com","login":null,"count":41},{"name":"Jonathan Bregler","email":"jonathan.bregler@sap.com","login":"breglerj","count":39},{"name":"Guenther Demetz","email":"guenther.demetz@wuerth-phoenix.com","login":"pb00068","count":29},{"name":"Sakthivel Subramanian","email":"sakthipvmj@gmail.com","login":"sakthivelmanii","count":28},{"name":"Martin Simka","email":"msimka@redhat.com","login":"simkam","count":26},{"name":"Stéphane Épardaud","email":"stef@epardaud.fr","login":"FroMage","count":25},{"name":"Eric Dalquist","email":"eric.dalquist@gmail.com","login":"edalquist","count":24},{"name":"Barry LaFond","email":"blafond@redhat.com","login":"blafond","count":23},{"name":"xhuang","email":"xhuang@jboss.com","login":null,"count":23},{"name":"Rayudu A L P","email":"abbireddynani@gmail.com","login":"rayudu3745","count":23},{"name":"Bidyadhar Mohanty","email":"bidyadhar.mohanty@oracle.com","login":"BidyadharM","count":22},{"name":"Yoryos Valotasios","email":"valotas@gmail.com","login":"valotas","count":22},{"name":"Esen Sagynov","email":"kadishmal@gmail.com","login":"kadishmal","count":22},{"name":"Max Rydahl Andersen","email":"max@hibernate.org","login":"maxandersen","count":20},{"name":"Jan-Willem Gmelig Meyling","email":"jan-willem@youngmediaexperts.nl","login":"jwgmeligmeyling","count":19},{"name":"Dmitry Geraskov","email":"dgeraskov@exadel.com","login":null,"count":18},{"name":"Daniël van Eeden","email":"git@myname.nl","login":"dveeden","count":18},{"name":"Erik-Berndt Scheper","email":"erik.berndt.scheper@gmail.com","login":null,"count":17},{"name":"Misty Stanley-Jones","email":"misty@redhat.com","login":null,"count":17},{"name":"Michal Skowronek","email":"michal.skowronek@uj.edu.pl","login":null,"count":16},{"name":"Philippe Marschall","email":"philippe.marschall@gmail.com","login":"marschall","count":16},{"name":"Jan Martiska","email":"jmartisk@redhat.com","login":"jmartisk","count":15},{"name":"Sharath Reddy","email":"sharathreddy@yahoo.com","login":"sharathjreddy","count":15},{"name":"zuchos","email":"lukasz.zuchowski@gmail.com","login":"Zuchos","count":15},{"name":"gtoison","email":"guillaume.toison@tobam.fr","login":"gtoison","count":14},{"name":"Mark Rotteveel","email":"mark@lawinegevaar.nl","login":"mrotteveel","count":14},{"name":"Réda Housni Alaoui","email":"reda-alaoui@hey.com","login":"reda-alaoui","count":14},{"name":"David M. Carr","email":"david@carrclan.us","login":"davidmc24","count":14},{"name":"Hernan","email":"Hernan@colossus","login":null,"count":13},{"name":"Bawany Satgunanathan","email":"bsatguna@redhat.com","login":null,"count":13},{"name":"Vincent Bouthinon","email":"v-bouthinon@efluid.fr","login":null,"count":13},{"name":"Karl von Randow","email":"karl@cactuslab.com","login":"karlvr","count":13},{"name":"Alex Snaps","email":"alex.snaps@gmail.com","login":"alexsnaps","count":13},{"name":"Peter Bambazek","email":"peter.bambazek@gmail.com","login":"peter1123581321","count":13},{"name":"Moad","email":"elfatihi.moad@gmail.com","login":"MoadElfatihi","count":13},{"name":"Rob Worsnop","email":"rworsnop@gmail.com","login":"rworsnop","count":12},{"name":"SweetWuXiaoMei","email":"sweetwuxiaomei@qq.com","login":"SweetWuXiaoMei","count":12},{"name":"Janario Oliveira","email":"janario.oliveira@gmail.com","login":"janario","count":12},{"name":"David Mansfield","email":"david@gandalf.cobite.com","login":null,"count":12},{"name":"Björn Kautler","email":"Bjoern@Kautler.net","login":"Vampire","count":12},{"name":"Christoph Dreis","email":"christoph.dreis@freenet.de","login":"dreis2211","count":11},{"name":"Shawn Clowater","email":"Shawn.Clowater@entero.com","login":null,"count":10},{"name":"Felix Feisst","email":"feisst.felix@gmail.com","login":null,"count":10},{"name":"Paul Ferraro","email":"paul.ferraro@redhat.com","login":"pferraro","count":10},{"name":"John O'Hara","email":"johara@redhat.com","login":"johnaohara","count":10},{"name":"liubao68","email":"bismy@qq.com","login":"liubao68","count":9},{"name":"Etienne Miret","email":"etienne.miret@ens-lyon.org","login":"EtienneMiret","count":9},{"name":"Craig Andrews","email":"candrews@integralblue.com","login":"candrews","count":9},{"name":"Bryan Varner","email":"bryan@varnernet.com","login":"bvarner","count":9},{"name":"Andrig Miller","email":"andy.miller@jboss.com","login":"andrigtmiller","count":9},{"name":"Andrej Golovnin","email":"andrej.golovnin@googlemail.com","login":"golovnin","count":9},{"name":"Ståle W. Pedersen","email":"stale.pedersen@jboss.org","login":null,"count":9},{"name":"Fábio Ueno","email":"fabio.t.ueno@gmail.com","login":"fabioueno","count":8},{"name":"Kamyar Sajjadi","email":"kamyar.sajjadi@gmail.com","login":"Kamii","count":8},{"name":"Jeremy Whiting","email":"jwhiting@redhat.com","login":null,"count":8},{"name":"The-Huginn","email":"rbudinsk@redhat.com","login":"The-Huginn","count":8},{"name":"utsav-mehta-noovosoft","email":"utsav.mehta@noovosoft.com","login":"utsavNoovosoft","count":8},{"name":"Atgoogat","email":"36623640+Atgoogat","login":"Atgoogat","count":8},{"name":"Alvaro Esteban Pedraza","email":"aepedraza3117@gmail.com","login":"aepedraza","count":7},{"name":"Daniel Black","email":"daniel@mariadb.org","login":"grooverdan","count":7},{"name":"George Gastaldi","email":"gegastaldi@gmail.com","login":"gastaldi","count":7},{"name":"Jacques Stadler","email":"jacques.stadler@gmail.com","login":"stadler","count":7},{"name":"Manuel Bernhardt","email":"bernhardt.manuel@gmail.com","login":"manuelbernhardt","count":7},{"name":"Cédric Tabin","email":"cedric.tabin@gmail.com","login":null,"count":7},{"name":"marcgiffing","email":"marcgiffing@web.de","login":"MarcGiffing","count":7},{"name":"John Lin","email":"johnlinp@gmail.com","login":"johnlinp","count":6},{"name":"Hernán Chanfreau","email":"hchanfreau@gmail.com","login":"hchanfreau","count":6},{"name":"Falko Modler","email":"famod","login":"famod","count":6},{"name":"Pierrick Rouxel","email":"pierrick.rouxel@me.com","login":"pierrickrouxel","count":6},{"name":"Stuart Douglas","email":"stuart.w.douglas@gmail.com","login":"stuartwdouglas","count":6},{"name":"The Geeky Asian","email":"msafeeransari@gmail.com","login":"thegeekyasian","count":6},{"name":"boris-unckel","email":"bu.githubcom@mail.unckel.net","login":"boris-unckel","count":6},{"name":"lvydra","email":"lvydra@proton.me","login":"lvydra","count":6},{"name":"qlfyd123","email":"hajewoong@gmail.com","login":"qlfyd123","count":6},{"name":"Dmitry Geraskov","email":"geraskov@gmail.com","login":"dheraskou","count":6},{"name":"Dmitry Kryukov","email":"dk2k@ya.ru","login":"dk2k","count":6},{"name":"Nikolay Shestakov","email":"ns@xtesseract.com","login":null,"count":6},{"name":"Manik Surtani","email":"manik@jboss.org","login":null,"count":6},{"name":"James Gilbertson","email":"james.gilbertson@bitsinglass.com","login":null,"count":6},{"name":"Chris Bredesen","email":"cbredesen@redhat.com","login":null,"count":6},{"name":"jjennnn","email":"jennifer.joby@ucdconnect.ie","login":"jjennnn","count":5},{"name":"renj","email":"renj@sybase.com","login":"renjunyan","count":5},{"name":"hailtondecastro","email":"hailtondecastro@gmail.com","login":"hailtondecastro","count":5},{"name":"fanste","email":"mails@ist-einmalig.de","login":"fanste","count":5},{"name":"Zbyněk Roubalík","email":"zroubali@redhat.com","login":null,"count":5},{"name":"Georg Echterling","email":"g.echterling@jobware.de","login":null,"count":5},{"name":"Matej Pucihar","email":"matej.pucihar@medius.si","login":null,"count":5},{"name":"Oliver Breidenbach","email":"obr@xima.de","login":null,"count":5},{"name":"Richard Wilding","email":"rwilding@redhat.com","login":null,"count":5},{"name":"Rafael Winterhalter","email":"rafael.wth@gmail.com","login":"raphw","count":5},{"name":"Oliver Lorenz","email":"lorenz@cosmocode.de","login":"olilo","count":5},{"name":"Oliver Breidenbach","email":"olly.breidenbach@googlemail.com","login":"OBreidenbach","count":5},{"name":"Jason Pyeron","email":"jpyeron@pdinc.us","login":"jpyeron","count":5},{"name":"Arnold Galovics","email":"galovicsarnold@gmail.com","login":"galovics","count":5},{"name":"Sebastian Nohn","email":"sebastian@nohn.net","login":"nohn","count":5},{"name":"Simeon","email":"simeon.malchev@gmail.com","login":"simeonmalchev","count":5},{"name":"Yordan Gigov","email":"jgigov@abv.bg","login":"coladict","count":5},{"name":"Moritz Becker","email":"moritz.becker@gmx.at","login":"Mobe91","count":4},{"name":"Dmitrii Karmanov","email":"d.karmanov@celonis.com","login":"karmann-dm","count":4},{"name":"Diego Lovison","email":"diegolovison@gmail.com","login":"diegolovison","count":4},{"name":"Daniel Mensinger","email":"d.mensinger@tup.com","login":"mensinda","count":4},{"name":"yjpark","email":"geoffrey.park@altibase.com","login":"younjungpark","count":4},{"name":"Felix Feisst","email":"feisst@patronas.com","login":null,"count":4},{"name":"asutosh936","email":"asutosh.pandya@hotmail.com","login":null,"count":4},{"name":"Hynek Svabek","email":"hsvabek@redhat.com","login":null,"count":4},{"name":"Csaba Varga","email":"csaboka@gmail.com","login":"csaboka","count":4},{"name":"Roland Illig","email":"rillig@it-economics.de","login":"rillig-ite","count":4},{"name":"Srltas","email":"kdm97912@gmail.com","login":"Srltas","count":4},{"name":"Svyatoslav Reyentenko","email":"rsvato@gmail.com","login":"rsvato","count":4},{"name":"Tamas Baranyi","email":"baranyit@gmail.com","login":"baranyit","count":4},{"name":"Thomas Heigl","email":"thomas.heigl@gmail.com","login":"theigl","count":4},{"name":"William Burns","email":"mudokonman@gmail.com","login":"wburns","count":4},{"name":"fmusolino","email":"fabiola.emilia.musolino@gmail.com","login":"fmusolino","count":4},{"name":"Jeff Maxwell","email":"jeff.maxwell@uptake.com","login":"jmax01","count":4},{"name":"randymay","email":"randy.may@blaazinsoftware.com","login":"randymay","count":4},{"name":"franz1981","email":"nigro.fra@gmail.com","login":"franz1981","count":4},{"name":"Luca Molteni","email":"volothamp@gmail.com","login":"lucamolteni","count":4},{"name":"Maksim","email":"max@tacco.onmicrosoft.com","login":"maxtacco","count":4},{"name":"Markus Heiden","email":"markus@markusheiden.de","login":"markusheiden","count":4},{"name":"David Ellingsworth","email":"David.Ellingsworth@davey.com","login":null,"count":4},{"name":"Lansana DIOMANDE","email":"lansana.diomande@epfedu.fr","login":"Asanio06","count":3},{"name":"Leon Schenk","email":"989485+leonschenk","login":"leonschenk","count":3},{"name":"Louis Jacomet","email":"ljacomet@gmail.com","login":"ljacomet","count":3},{"name":"Luke Chen","email":"showuon@gmail.com","login":"showuon","count":3},{"name":"Alexander Kotlyarov","email":"akotlyarov@gmail.com","login":"akotlyarov","count":3},{"name":"Anders Wallgren","email":"anders_wallgren@alum.mit.edu","login":"awallgren","count":3},{"name":"Benedikt Waldvogel","email":"mail@bwaldvogel.de","login":"bwaldvogel","count":3},{"name":"Bogdan Stirbat","email":"bogdan.stirbat@gmail.com","login":"BogdanStirbat","count":3},{"name":"Dave Repshas","email":"David.Repshas@Teradata.com","login":"drepshas","count":3},{"name":"Dmytro Bondar","email":"work.bondar@gmail.com","login":"Loniks","count":3},{"name":"Elena Felder","email":"41136058+elefeint","login":"elefeint","count":3},{"name":"Frank Doherty","email":"fdoherty@atlassian.com","login":"dohertyfjatl","count":3},{"name":"Gary Gregory","email":"garydgregory@gmail.com","login":"garydgregory","count":3},{"name":"Georgios Andrianakis","email":"geoand@gmail.com","login":"geoand","count":3},{"name":"Mohammed Ayman Khan","email":"mohammedaymankhan24@gmail.com","login":"MohammedAymanKhan","count":3},{"name":"Pavel Rogozhin","email":"rogozhinp@gmail.com","login":"rogozhinp","count":3},{"name":"Piotr Findeisen","email":"piotr.findeisen@syncron.com","login":"findepi","count":3},{"name":"Rob Green","email":"rob.green@greenbeard.io","login":"robwgreenjr","count":3},{"name":"Rodrigo Turini","email":"rdrg.turini@gmail.com","login":"Turini","count":3},{"name":"Selaron","email":"selaron@posteo.de","login":"Selaron","count":3},{"name":"Stefan Trienen","email":"stefan.dev.public@gmail.com","login":"Stefan-Tri","count":3},{"name":"Tomaz Cerar","email":"tomaz.cerar@gmail.com","login":"ctomc","count":3},{"name":"Adrodoc","email":"adrodoc55@googlemail.com","login":"Adrodoc","count":3},{"name":"Kai Suchomel","email":"kai.suchomel@gec.io","login":"KaiSuchomel","count":3},{"name":"syeeuns","email":"syeeuns@gmail.com","login":"syeeuns","count":3},{"name":"stringintech","email":"stringintech@gmail.com","login":"stringintech","count":3},{"name":"Emond Papegaaij","email":"emond.papegaaij@topicus.nl","login":"papegaaij","count":3},{"name":"oyeliseiev-ua","email":"oyeliseiev-ua@singlestore.com","login":"oyeliseiev-ua","count":3},{"name":"nikowitt","email":"github@wittenbeck-it.de","login":"nikowitt","count":3},{"name":"brinvex-dev1","email":"dev1@brinvex.com","login":"brinvex-dev1","count":3},{"name":"awantikashinde","email":"awantikashinde1201@gmail.com","login":"awantika1201","count":3},{"name":"Zhenlei Huang","email":"zlei.huang@gmail.com","login":"gmshake","count":3},{"name":"Darren Evenson","email":"darrene@clickiqinc.com","login":null,"count":3},{"name":"Ken Schosinsky","email":"schosinsky@spirit-of-selling.de","login":null,"count":3},{"name":"JongDae Kim","email":"jdkim528@users.sourceforge.net","login":null,"count":3},{"name":"Svein","email":"svein.baardsen@retriever.no","login":null,"count":3},{"name":"Thorsten Schäfer","email":"reindyr@helheim.eu","login":null,"count":3},{"name":"Tomasz Blachowicz","email":"tblachowicz@gmail.com","login":null,"count":3},{"name":"Viefhaus","email":"Viefhaus@his4502.his.de","login":null,"count":3},{"name":"ow186003","email":"“ory.warshenbrot@terdata.com”","login":null,"count":3},{"name":"jcibik","email":"jcibik@redhat.com","login":null,"count":3},{"name":"Wander Winkelhorst","email":"w.winkelhorst@meineman.nl","login":null,"count":3},{"name":"Kamil Szymanski","email":"kamil.szymanski.dev@gmail.com","login":"kamilszymanski","count":3},{"name":"KARGET","email":"karge@itestra.de","login":"karge-itestra","count":3},{"name":"Joseph B. Ottinger","email":"joeo@enigmastation.com","login":"jottinger","count":3},{"name":"Jerome Prinet","email":"jprinet@gradle.com","login":"jprinet","count":3},{"name":"Henri Tremblay","email":"henri.tremblay@gmail.com","login":"henri-tremblay","count":3},{"name":"Nelson Rodrigues","email":"nelson@nelsonjrodrigues.com","login":"nrodrigues","count":3},{"name":"Minjae Seon","email":"eric@softsquared.com","login":"Aftermoon-dev","count":3},{"name":"Yoobin Yoon","email":"yunyubin54@gmail.com","login":"yybmion","count":3},{"name":"Rune Steinseth","email":"rune@jpro.no","login":"runeks","count":2},{"name":"Roland Kurucz","email":"rkurucz9@gmail.com","login":"rkurucz9","count":2},{"name":"Filipe Roque","email":"froque@premium-minds.com","login":"froque","count":2},{"name":"Florian Heck","email":"florian.heck@hotmail.de","login":"fheck","count":2},{"name":"Greg Luck","email":"gluck@gregluck.com","login":"gregrluck","count":2},{"name":"H.Lo","email":"horvoje@gmail.com","login":"H-Lo","count":2},{"name":"HJK181","email":"hjk@commerce-experts.com","login":"HJK181","count":2},{"name":"Harsh Panchal","email":"panchal.harsh18@gmail.com","login":"BOOTMGR","count":2},{"name":"Hendrik Schreiber","email":"hs@tagtraum.com","login":"hendriks73","count":2},{"name":"Jaikiran Pai","email":"jaikiran.pai@gmail.com","login":"jaikiran","count":2},{"name":"Jere Penttinen","email":"jere@disroot.org","login":"jerepenttinen","count":2},{"name":"Kacper Koniuszy","email":"120419423+kkoniuszy","login":"kkoniuszy","count":2},{"name":"Daren Isaacs","email":"ikkyisaacs@gmail.com","login":"dareni","count":2},{"name":"Danny Gräf","email":"deep@dagnu.de","login":"dgf","count":2},{"name":"Laurent Almeras","email":"lalmeras@gmail.com","login":"lalmeras","count":2},{"name":"Malcolm Taylor","email":"malcolm@semmle.com","login":"malcolmtaylor","count":2},{"name":"Martijn Blankestijn","email":"martijnblankestijn@gmail.com","login":"martijnblankestijn","count":2},{"name":"Matthew Vance","email":"yinzara@gmail.com","login":"yinzara","count":2},{"name":"Michael Rudolf","email":"javaprog@gmx.de","login":"javaprog","count":2},{"name":"MilovanderZee","email":"milo@vanderzee.org","login":"MilovdZee","count":2},{"name":"Miroslav Silhavy","email":"miroslav.silhavy@unimarket.com","login":"mira-silhavy","count":2},{"name":"Moritz Kobel","email":"moritz.kobel@qube.ag","login":"mkobel","count":2},{"name":"Mustafa Ulu","email":"mustafau@sabanciuniv.edu","login":"mustafau","count":2},{"name":"Nelson Osacky","email":"nosacky@gradle.com","login":"runningcode","count":2},{"name":"Thomas Jones-Low","email":"tjoneslow@gmail.com","login":"tjoneslo","count":2},{"name":"Terry Tao","email":"yueyang.tao@gmail.com","login":"TerryTaoYY","count":2},{"name":"Sven Strickroth","email":"email@cs-ware.de","login":"csware","count":2},{"name":"Bruno P. Kinoshita","email":"kinow","login":"kinow","count":2},{"name":"Barnaby Court","email":"bcourt@gmail.com","login":"barnabycourt","count":2},{"name":"Andy2003","email":"andy.2003@gmail.com","login":"Andy2003","count":2},{"name":"cristhiank","email":"calovi86@gmail.com","login":"cristhiank","count":2},{"name":"del65","email":"icidel","login":"icidel","count":2},{"name":"gajendra.jatav","email":"raaz2.gajendra@gmail.com","login":"codecracker2014","count":2},{"name":"jeonjonghyeok","email":"tongher1685@gmail.com","login":"jeonjonghyeok","count":2},{"name":"johnniang","email":"johnniang@foxmail.com","login":"JohnNiang","count":2},{"name":"joohyukkim","email":"beanskobe@gmail.com","login":"JooHyukKim","count":2},{"name":"nandina","email":"srinandina@gmail.com","login":"nandina","count":2},{"name":"rhart","email":"rus@gradle.com","login":"rhart","count":2},{"name":"seregamorph","email":"serega.morph@gmail.com","login":"seregamorph","count":2},{"name":"Akshit Agarwal","email":"akshitagarwal97@gmail.com","login":"Akshit97","count":2},{"name":"Guillaume HUSTA","email":"guillaume.husta@gmail.com","login":"ghusta","count":2},{"name":"Nguyen Nhu Phuc","email":"phucnn.work@gmail.com","login":"nhuphucnguyen","count":2},{"name":"clement","email":"clement.denis@gmail.com","login":"clementdenis","count":2},{"name":"bb7133","email":"bb7133@gmail.com","login":"bb7133","count":2},{"name":"amkad","email":"amkad2@gmail.com","login":"amkad","count":2},{"name":"Zhihong Yu","email":"ted.yu@datavisor.com","login":"datavisortedyu","count":2},{"name":"Yosef Yona","email":"yyona@panaya.com","login":"yyona-panaya","count":2},{"name":"Vincent Ricard","email":"ghostd","login":"ghostd","count":2},{"name":"Vasily Kochnev","email":"vasily.kochnev@gmail.com","login":"vkochnev","count":2},{"name":"Tomas Cerskus","email":"tomas-c","login":"tomas-c","count":2},{"name":"Noel Trout","email":"noel.trout@avinode.com","login":"noetro","count":2},{"name":"Oliver Saggau","email":"oliver.saggau@sysvision.de","login":"oliversaggau","count":2},{"name":"Panagiotis Sotiropoulos","email":"psotirop@redhat.com","login":"panossot","count":2},{"name":"Petteri Pitkänen","email":"petepitk@gmail.com","login":"petteripitkanen","count":2},{"name":"Ratul sharker","email":"sharker.ratul.08@gmail.com","login":"ratulSharker","count":2},{"name":"Rguihard","email":"remy.guihard@socleo.com","login":"rguihard","count":2},{"name":"Richard Barnes","email":"rpgingerbarnes@gmail.com","login":"rpgingerbarnes","count":2},{"name":"Bahaa Zaid","email":"bahaa.zaid@pixelogicmedia.com","login":"bahaa","count":2},{"name":"Barney","email":"barney2k7@gmail.com","login":"barney2k7","count":2},{"name":"Alex","email":"alex.coolen@duo.nl","login":null,"count":2},{"name":"Benoit GUERIN","email":"bguerin@netceler.com","login":null,"count":2},{"name":"Brad Koehn","email":"brad.koehn@thomsonreuters.com","login":null,"count":2},{"name":"Brian Parker","email":"onebrianparker@gmail.com","login":null,"count":2},{"name":"Bryan Turner","email":"bturner@atlassian.com","login":null,"count":2},{"name":"Burkhard Graves","email":"graves@id-on.de","login":null,"count":2},{"name":"Christian Bauer","email":"cb@4thline.com","login":null,"count":2},{"name":"Dustin Schultz","email":"dustin.schultz@utah.edu","login":null,"count":2},{"name":"Dmitry Panov","email":"dmitry.panov@cgi.com","login":null,"count":2},{"name":"A Garcia","email":"agarcia@jboss.com","login":null,"count":2},{"name":"Dariush Moshiri","email":"dariush.moshiri@akur8-tech.com","login":null,"count":2},{"name":"Juergen Zimmermann","email":"Juergen.Zimmermann (at) HS-Karlsruhe.de","login":null,"count":2},{"name":"Ladislav Kulhanek","email":"ladislav.kulhanek@crossad-ni.com","login":null,"count":2},{"name":"Laurent RICHARD","email":"laurent-richard@harvest.fr","login":null,"count":2},{"name":"Martin Eisenhardt","email":"martin.eisenhardt@mneisen.org","login":null,"count":2},{"name":"Michael Rudolf","email":"michael.rudolf01@sap.com","login":null,"count":2},{"name":"Rapenok, Ivan","email":"Ivan.Rapenok@nexign.com","login":null,"count":2},{"name":"Peter Holvenstot","email":"pholvenstot@pholvenst-10175.altarum.pri","login":null,"count":2},{"name":"Lars Karlström","email":"lars.karlstrom@easit.com","login":null,"count":2},{"name":"Timo Verhoeven","email":"timo.verhoeven@guidecom.de","login":null,"count":2},{"name":"Tomas Lamr","email":"tomas.lamr@pricefx.eu","login":null,"count":2},{"name":"Tommy Svendsen","email":"tommy.svendsen@aize.io","login":null,"count":2},{"name":"Vojtěch Šalbaba","email":"vsalbaba@redhat.com","login":null,"count":2},{"name":"Vyacheslav Dimitrov","email":"dimitrov@cs.karelia.ru","login":null,"count":2},{"name":"Walter White","email":"WalterWhite@walterjwhite.com","login":null,"count":2},{"name":"tcordel","email":"tcordel@enovacom.com","login":null,"count":2},{"name":"s.vasilyev","email":"s.vasilyev@bftcom.com","login":null,"count":2},{"name":"Felix","email":"vip.zatebe@mail.ru","login":"FelixDes","count":2},{"name":"David Pilato","email":"david@pilato.fr","login":"dadoonet","count":2},{"name":"Derk Dukker","email":"derk.dukker@gmail.com","login":"derkd","count":2},{"name":"Dmitrii Bocharov","email":"dbocharo@redhat.com","login":"bdshadow","count":2},{"name":"Dominik Demaj-Seitz","email":"12406359+domids","login":"domids","count":2},{"name":"Dominique Toupin","email":"dtoupin@360-innovations.com","login":"domtoupin","count":2},{"name":"Emanuel Ciuca","email":"emanuel.ciuca@gmail.com","login":"eciuca","count":2},{"name":"Emmanuel Duchastenier","email":"emmanuel.duchastenier@bonitasoft.com","login":"educhastenier","count":2},{"name":"Eric Haas","email":"eric@s3a.org","login":"moriarty-s3a","count":2},{"name":"Fabricio Gregorio","email":"fabricio.gregorio@sofis.lat","login":"fgsofis","count":2},{"name":"Daniel Shuy","email":"daniel_shuy@hotmail.com","login":"daniel-shuy","count":2},{"name":"Daniel Heinrich","email":"dannynullzwo@gmail.com","login":"Danny02","count":2},{"name":"Cody Lerum","email":"cody.lerum@gmail.com","login":"codylerum","count":2},{"name":"Chris Dennis","email":"chris.w.dennis@gmail.com","login":"chrisdennis","count":2},{"name":"Cash Costello","email":"cash.costello@gmail.com","login":"cash","count":2},{"name":"Carlos Aristu","email":"carlos.aristu@openbravo.com","login":"caristu","count":2},{"name":"Boris Korogvich","email":"b.korogvich@gmail.com","login":"VEINHORN","count":2},{"name":"Bas van Schaik","email":"github@s.traiectum.net","login":"sj","count":2},{"name":"Konrad Kügler","email":"konrad.kuegler@hype.de","login":"kkuegler","count":2},{"name":"Adar Lieber-Dembo","email":"adar@cloudera.com","login":"adembo","count":2},{"name":"Alexander Bryantsev","email":"a.i.bryantsev@gmail.com","login":"Bryantsev","count":2},{"name":"Amit Mendapara","email":"mendapara.amit@gmail.com","login":"cristatus","count":2},{"name":"Andrei Ivanov","email":"andrei.ivanov@gmail.com","login":"andrei-ivanov","count":2},{"name":"Andrei Solntsev","email":"andrei.solntsev@gmail.com","login":"asolntsev","count":2},{"name":"Ptits de Barbe","email":"ettavolt@gmail.com","login":"ettavolt","count":2},{"name":"Andrew Clemons","email":"andrew.clemons@sap.com","login":"aclemons","count":2},{"name":"Andrew Guibert","email":"andy.guibert@gmail.com","login":"aguibert","count":2},{"name":"Anton Marsden","email":"anton.marsden@ninetyten.co.nz","login":"antonmarsden","count":2},{"name":"Archie L. Cobbs","email":"archie.cobbs@gmail.com","login":"archiecobbs","count":2},{"name":"info@kawoolutions.com","email":"info@kawoolutions.com","login":null,"count":2},{"name":"Romain Moreau","email":"romainmoreau@gmail.com","login":"romainmoreau","count":2},{"name":"Marvin Froeder","email":"marvin.froeder@vizexplorer.com","login":"velo","count":2},{"name":"mdebeljuh","email":"marino.debeljuh@gmail.com","login":null,"count":1},{"name":"mam","email":"minas.manthos@kyberna.com","login":null,"count":1},{"name":"lrcuhuh","email":"heinz.huber@racon.at","login":null,"count":1},{"name":"lining","email":"2016220101025@std.uestc.edu.cn","login":null,"count":1},{"name":"lgathy","email":"lajos.gathy@doctusoft.com","login":null,"count":1},{"name":"ldelima","email":"ldelima@redhat.com","login":null,"count":1},{"name":"katiforis","email":"katiforis@intralot.com","login":null,"count":1},{"name":"jvdvTechno","email":"jeroen.van.der.vegt@technolution.eu","login":null,"count":1},{"name":"jfb","email":"Jean-Francois.Boeuf@orchestranetworks.com","login":null,"count":1},{"name":"geonhee.lee","email":"include42@linecorp.com","login":null,"count":1},{"name":"echunca","email":"simba.cai@ericsson.com","login":null,"count":1},{"name":"carnusj","email":"jeremy.carnus@zimmercas.com","login":null,"count":1},{"name":"bananan","email":"bananan@ms.net.lodz.pl","login":null,"count":1},{"name":"ballm","email":"martin.ball@grg.com","login":null,"count":1},{"name":"ali","email":"ail77erfqagh99@gmail.com","login":null,"count":1},{"name":"Губанов Станислав","email":"gubanovs@iac.spb.ru","login":null,"count":1},{"name":"vydn","email":"v@vyhn.net","login":null,"count":1},{"name":"varun.shrivastava","email":"varun.shrivastava@atg.se","login":null,"count":1},{"name":"thymepuns","email":"thymepuns@gmail.com","login":null,"count":1},{"name":"subijayb","email":"subijay.bhattacharya@nokia.com","login":null,"count":1},{"name":"rustem.yagudin","email":"rustem.yagudin@t-systems.ru","login":null,"count":1},{"name":"rreynolds","email":"richard.reynolds.ctr@sofsa.mil","login":null,"count":1},{"name":"rgarcia","email":"rgarcia@cosium.com","login":null,"count":1},{"name":"qinxi","email":"qinxi199267@gmail.com","login":null,"count":1},{"name":"ouzned","email":"ouzned.alleykatze@gmail.com","login":null,"count":1},{"name":"nicklas.wallgren","email":"Nw0601ST","login":null,"count":1},{"name":"msymonov","email":"msymonov@corelogic.com","login":null,"count":1},{"name":"mmain\\heda151","email":"DanielAlexander.Heinrich.External@cassidian.com","login":null,"count":1},{"name":"michiel.hendriks","email":"michiel.hendriks@mp-objects.com","login":null,"count":1},{"name":"michal","email":"michal@michal-desktop","login":null,"count":1},{"name":"mgrenonville","email":"mgrenonville@excilys.com","login":null,"count":1},{"name":"Selaron","email":"holger.sunke@email.de","login":null,"count":1},{"name":"Samuel Guillemet","email":"samuel.guillemet@telecom-sudparis.eu","login":null,"count":1},{"name":"Safeer Ansari","email":"safeer.ansari@ekar.me","login":null,"count":1},{"name":"Romain Fromi","email":"rf@ejust.ch","login":null,"count":1},{"name":"Robert Rettig","email":"rrettig@synapplix.de","login":null,"count":1},{"name":"Piotr Bobinski","email":"piotr.bobinski@ericsson.com","login":null,"count":1},{"name":"Peter Holvenstot","email":"peter.holvenstot@altarum.org","login":null,"count":1},{"name":"Peter Aisher","email":"peter.aisher@me.com","login":null,"count":1},{"name":"Oleksandr_Ierenkov","email":"Oleksandr_Ierenkov@epam.com","login":null,"count":1},{"name":"Nikolay Shestakov","email":"snv@xargs.ru","login":null,"count":1},{"name":"Nicolas MAUTI","email":"nicolas@dhcp24-50.bureaux","login":null,"count":1},{"name":"Nicolai Parlog","email":"nipa@codefx.org","login":null,"count":1},{"name":"Mykola Pavluchynskyi","email":"mpa@encode.dk","login":null,"count":1},{"name":"Mykhaylo Gnylorybov","email":"Mykhaylo_Gnylorybov@epam.com","login":null,"count":1},{"name":"Mike Mannion","email":"mike.mannion@karakun.com","login":null,"count":1},{"name":"Michael Spahn","email":"mspahn@tocco.ch","login":null,"count":1},{"name":"ageery","email":"andrew_geery@windsorsolutions.com","login":null,"count":1},{"name":"a.vasilev","email":"a.vasilev@seeburger.com","login":null,"count":1},{"name":"a.navrotskiy","email":"navrotskiy@corp.mail.ru","login":null,"count":1},{"name":"Vootele Rotov","email":"vootele.rotov@roguewave.com","login":null,"count":1},{"name":"Vincent Stradiot","email":"vincentstradiot@hotmail.be","login":null,"count":1},{"name":"Vincent Stradiot","email":"vincent.stradiot@healthconnect.be","login":null,"count":1},{"name":"Vedran Prišćan","email":"vedran.priscan@amphinicy.com","login":null,"count":1},{"name":"U-MateusPimenta\\Mateus Pimenta","email":"mpimenta@MateusPimenta.(none)","login":null,"count":1},{"name":"Tommy Knowlton","email":"tknowlton@iamhisfriend.org","login":null,"count":1},{"name":"Tom Gottfried","email":"tom.gottfried@intevation.de","login":null,"count":1},{"name":"Thomas Reinhardt","email":"thomas.reinhardt@software4production.com","login":null,"count":1},{"name":"Thomas Einwaller","email":"thomas.einwaller@troii.com","login":null,"count":1},{"name":"Thomas Bürli","email":"thomas.buerli@adnovum.ch","login":null,"count":1},{"name":"Sylvain Dusart","email":"sylvain.dusart@aca.fr","login":null,"count":1},{"name":"Shaun Appleton","email":"sappleto@dhcp-1-102.fab.redhat.com","login":null,"count":1},{"name":"Sergey Morgunov","email":"smorgunov@at-consulting.ru","login":null,"count":1},{"name":"Viacheslav Rarata","email":"cayneir@gmail.com","login":"viacheslav-rarata","count":1},{"name":"Victor Bonnier","email":"vikkear@hotmail.com","login":"Vikkear","count":1},{"name":"Victor NOËL","email":"victor.noel@pricefx.com","login":"victornoel","count":1},{"name":"Vincent Bouthinon","email":"vbouthinon@free.fr","login":"boutss","count":1},{"name":"Vincent Cornet","email":"vincent.cornet@gmail.com","login":"Eviradnus","count":1},{"name":"Vincent Jansen","email":"v.jansen@blueriq.com","login":"vdotjansen","count":1},{"name":"Vishavjeet Thakur","email":"vishavjeetsinghthakur@gmail.com","login":"Vishavjeet6","count":1},{"name":"Vlad Kuznetsov","email":"vladislav.u.kuznetsov@gmail.com","login":"Vlad-Kuznetsov","count":1},{"name":"Werner Altewischer","email":"werner.altewischer@beatgridmedia.com","login":"werner77","count":1},{"name":"Xavier Dury","email":"kalgon@hotmail.com","login":"kalgon","count":1},{"name":"Yann Diorcet","email":"diorcet.yann@gmail.com","login":"diorcety","count":1},{"name":"Yann Odeyer","email":"yann.odeyer@worldline.com","login":"jean-michel-apeupres","count":1},{"name":"Yash Jain","email":"yashjain12yj","login":"yashjain12yj","count":1},{"name":"Yentl Projects","email":"54561187+yentlprojects","login":"yentlprojects","count":1},{"name":"aisensiy","email":"aisensiy@163.com","login":"aisensiy","count":1},{"name":"aliaksei.astashenka","email":"aleksey.astashenko@jemmic.com","login":"aleksey-astashenko-jemmic","count":1},{"name":"SuperPat","email":"7791600+SuperPat45","login":"SuperPat45","count":1},{"name":"Sven Haster","email":"buurman.sven@gmail.com","login":"haster","count":1},{"name":"Sylvain Lecoy","email":"sylvain.lecoy@gmail.com","login":"itsmoonrack","count":1},{"name":"Tair Sabirgaliev","email":"tair.sabirgaliev@gmail.com","login":"tsabirgaliev","count":1},{"name":"Taras","email":"96leo10@gmail.com","login":"pro100leo","count":1},{"name":"The-Arne","email":"113175601+The-Arne","login":"The-Arne","count":1},{"name":"Thomas Wearmouth","email":"tomwmth@pm.me","login":"tomwmth","count":1},{"name":"Thorben Janssen","email":"2053825+thjanssen","login":"thjanssen","count":1},{"name":"Tiger Wang","email":"wanghu-520@163.com","login":"frankggyy","count":1},{"name":"Tim Ward","email":"timothyjward@apache.org","login":"timothyjward","count":1},{"name":"Timofey Gorshkov","email":"Feathoron.Errandir@gmail.com","login":"errandir","count":1},{"name":"Torsten Schöne","email":"torsten.schoene@de.markant.com","login":"rondicus","count":1},{"name":"Trask Stalnaker","email":"trask.stalnaker@gmail.com","login":"trask","count":1},{"name":"Troeger, Martin (K-SIPB-1/3)","email":"martin.troeger@volkswagen.de","login":"moftu","count":1},{"name":"Ulrich Bestfleisch","email":"ulrich.bestfleisch@sap.com","login":"bestmeat","count":1},{"name":"Utku Gultopu","email":"ugultopu@gmail.com","login":"ugultopu","count":1},{"name":"cmuchinsky","email":"craig.muchinsky@collibra.com","login":"cmuchinsky","count":1},{"name":"danielsmith1995","email":"45878051+danielsmith1995","login":"danielsmith1995","count":1},{"name":"datazuul","email":"ralf.eichinger@gmail.com","login":"datazuul","count":1},{"name":"davidmuzik","email":"davidmuzik@gmail.com","login":"davidmuzik","count":1},{"name":"dcebotarenco","email":"dcebotarenco@gmail.com","login":"dcebotarenco","count":1},{"name":"dewarder","email":"dewarder@gmail.com","login":"hluhovskyi","count":1},{"name":"dgh","email":"tjln0608@gmail.com","login":"wen-ys","count":1},{"name":"diego","email":"diego.dupin@gmail.com","login":"rusher","count":1},{"name":"dionis","email":"dionis.argiri@gmail.com","login":"dargiri","count":1},{"name":"dkublik","email":"dkublik@gmail.com","login":"dkublik","count":1},{"name":"dnovitski","email":"54758025+dnovitski","login":"dnovitski","count":1},{"name":"dodgex","email":"kujanssen@freenet.de","login":"dodgex","count":1},{"name":"dohyun_lim","email":"dohyun_lim@tmaxsoft.com","login":"kuuku123","count":1},{"name":"fernando","email":"fcalderon@nearsoft.com","login":"fcalderonnearsoft","count":1},{"name":"george-007","email":"jiri.pejchal@gmail.com","login":"jiri-pejchal","count":1},{"name":"graemerocher","email":"graeme.rocher@gmail.com","login":"graemerocher","count":1},{"name":"amaeda","email":"maeda.br@gmail.com","login":"maeda","count":1},{"name":"ammachado","email":"adriano.m.machado@hotmail.com","login":"ammachado","count":1},{"name":"ankiaga","email":"ankiaga@google.com","login":"ankiaga","count":1},{"name":"ats1999","email":"rkt82224@gmail.com","login":"ats1999","count":1},{"name":"bbodnar","email":"barnabas.bodnar@ser.de","login":"bbodnar","count":1},{"name":"bdragan","email":"bozanovicdr@gmail.com","login":"bdragan","count":1},{"name":"beamerblvd","email":"github@nicholaswilliams.net","login":"beamerblvd","count":1},{"name":"begmandev","email":"joel.bagley@gmail.com","login":"joelbbagley","count":1},{"name":"benoit","email":"b.wiart@ubik-ingenierie.com","login":"benbenw","count":1},{"name":"bernd hopp","email":"berndjhopp@gmail.com","login":"berndhopp","count":1},{"name":"bleporini","email":"bleporini@gmail.com","login":"bleporini","count":1},{"name":"bradbalogh","email":"36998320+bradbalogh","login":"bradbalogh","count":1},{"name":"carlblan","email":"carlos.a.blanco@oracle.com","login":"carlblan","count":1},{"name":"chandre","email":"6765025+chandre92","login":"chandre92","count":1},{"name":"chris-manning","email":"chris.manning@comptel.com","login":"chris-manning","count":1},{"name":"chrissyast","email":"31564153+chrissyast","login":"chrissyast","count":1},{"name":"lpradel","email":"lukas.pradel@googlemail.com","login":"lpradel","count":1},{"name":"lrobot","email":"lrobot.qq@gmail.com","login":"lrobot","count":1},{"name":"lukawski-adrian","email":"adrian.lukawski@gmail.com","login":"lukawski-adrian","count":1},{"name":"magdalena","email":"magdalena.moeller@gmail.com","login":"magdalenamoeller","count":1},{"name":"marekchodak","email":"marekchodak@hotmail.com","login":"MarekChodak","count":1},{"name":"mgarcia.devinuesa","email":"mgarcia.devinuesa@knowmadmood.com","login":"mgdvinuesa-knowmadmood","count":1},{"name":"mharray","email":"michaelharray@gmail.com","login":"mharray","count":1},{"name":"mimmoz81","email":"luca.domenic@gmail.com","login":"luca-domenichini","count":1},{"name":"minman","email":"minas.manthos@gmail.com","login":"minman","count":1},{"name":"mrizzi","email":"mrizzi@redhat.com","login":"mrizzi","count":1},{"name":"msulima","email":"sulima.mateusz@gmail.com","login":"msulima","count":1},{"name":"msvticket","email":"Marten.Svantesson@ticket.se","login":"msvticket","count":1},{"name":"mutazkabashi","email":"mutazhkabbashi@yahoo.co.uk","login":"mutazkabashi","count":1},{"name":"namucy","email":"wkdcjfdud13@gmail.com","login":"namuuCY","count":1},{"name":"norbert_wirges","email":"norbert.wirges@werum.com","login":"nwwerum","count":1},{"name":"opporancisis","email":"opporancisis","login":"opporancisis","count":1},{"name":"helloztt","email":"347871727@qq.com","login":"helloztt","count":1},{"name":"hoyeonyy","email":"highoption@naver.com","login":"hoyeonyy","count":1},{"name":"hugo-syn","email":"hugo.vincent@synacktiv.com","login":"hugo-syn","count":1},{"name":"hugothomas","email":"hugo.thomas98@gmail.com","login":"hugothomas","count":1},{"name":"isc-service","email":"RE-External@intersystems.com","login":"isc-service","count":1},{"name":"java4dev@","email":"java4devpl@gmail.com","login":"java4dev","count":1},{"name":"jiangHZ","email":"jianghz1998@gmail.com","login":"jiangHZ2","count":1},{"name":"jmoore","email":"josh@glencoesoftware.com","login":"joshmoore","count":1},{"name":"jonathan","email":"jonathan.ihm@gmail.com","login":"jonathanihm","count":1},{"name":"jun","email":"ggprgrkjh@naver.com","login":"junhyeongkim2","count":1},{"name":"justinsubert","email":"justinsubert@gmail.com","login":"justinsubert","count":1},{"name":"k abram","email":"karthik@k2d2.org","login":"k-abram","count":1},{"name":"kkywalk2","email":"kkywalk2@gmail.com","login":"kkywalk2","count":1},{"name":"koisyu","email":"koisyu@toss.im","login":"chokyuhee","count":1},{"name":"kubo","email":"jsodpad@gmail.com","login":"bukajsytlos","count":1},{"name":"leonliao","email":"xiaobo.liao@gmail.com","login":"leonliao","count":1},{"name":"taghizadeh87","email":"84373927+taghizadeh87","login":"taghizadeh87","count":1},{"name":"thunderstorm","email":"wytzevanderploeg@hotmail.com","login":"wytzevanderploeg","count":1},{"name":"timpeeters","email":"tim.peeters@me.com","login":"timpeeters","count":1},{"name":"torin-st","email":"torin-st@yandex.ru","login":"torin-st","count":1},{"name":"tscz","email":"tscz","login":"tscz","count":1},{"name":"w1ida","email":"gxunda@gmail.com","login":"w1ida","count":1},{"name":"waahhh","email":"waahhh88@gmail.com","login":"waahhh","count":1},{"name":"wafflejuice","email":"wafflejuice96@gmail.com","login":"hogeunchung","count":1},{"name":"wanderer2097","email":"dl2097@gmail.com","login":"wanderer2097","count":1},{"name":"wonwoo","email":"aoruqjfu@gmail.com","login":"wonwoo","count":1},{"name":"yuanhang zheng","email":"yuanhang.zheng@qq.com","login":"zhengyhn","count":1},{"name":"zgq","email":"203083679@qq.com","login":"pdxzzz","count":1},{"name":"zinzoddari","email":"zinzoddari@gmail.com","login":"zinzoddari","count":1},{"name":"姜禹","email":"rmfish","login":"rmfish","count":1},{"name":"宁培培","email":"1039725910@qq.com","login":"ningpp","count":1},{"name":"박종찬","email":"jongchan.park@42dot.ai","login":"chanzxxx","count":1},{"name":"perceptron8","email":"perceptron8","login":"perceptron8","count":1},{"name":"petar.tahchiev","email":"paranoiabla@gmail.com","login":"ptahchiev","count":1},{"name":"rmartinc","email":"rmartinc@redhat.com","login":"rmartinc","count":1},{"name":"rsingle","email":"rene.single@ametras.com","login":"BGNut","count":1},{"name":"sajad","email":"mehrabisajad@outlook.com","login":"mehrabisajad","count":1},{"name":"saleese-gnu","email":"saleese@gnu.ac.kr","login":"saleese-gnu","count":1},{"name":"shen dongsheng","email":"wideunique@qq.com","login":"wideunique","count":1},{"name":"shin-mallang","email":"huipulci1@naver.com","login":"shin-mallang","count":1},{"name":"skis","email":"sriharshareddyk@hotmail.com","login":"ckatpally","count":1},{"name":"sndyuk","email":"sanada@sndyuk.com","login":"sndyuk","count":1},{"name":"soldierkam","email":"soldier.kam@gmail.com","login":"soldierkam","count":1},{"name":"songhaechan","email":"bukak2019@naver.com","login":"songhaechan","count":1},{"name":"sreekarareddy","email":"sreekara.reddy.g@gmail.com","login":"Sreekara-Reddy","count":1},{"name":"stasal","email":"al.stanislav@gmail.com","login":"stasal","count":1},{"name":"stonio","email":"stonio","login":"stonio","count":1},{"name":"sujl95","email":"sujl95@naver.com","login":"sujl95","count":1},{"name":"András Eisenberger","email":"csirkeee@gmail.com","login":"csirkeee","count":1},{"name":"Jorgen Rydenius","email":"jorgen@pingpong.net","login":null,"count":1},{"name":"Johannes Kümmel","email":"johannes.kummel@roguewave.com","login":null,"count":1},{"name":"Jan Šimek","email":"jan.simek@etnetera.cz","login":null,"count":1},{"name":"Jacques Stadler","email":"jacques.stadler@mgb.ch","login":null,"count":1},{"name":"Jaanus Hansen","email":"jaanus.hansen@nowinnovations.com","login":null,"count":1},{"name":"Ivaylo Mitrev","email":"ivaylo.mitrev@documaster.com","login":null,"count":1},{"name":"Ivan Sopov","email":"isopov@reveredata.com","login":null,"count":1},{"name":"Ihar Sadounikau","email":"i.sadounikau@mytaxi.com","login":null,"count":1},{"name":"Igor Dmitriev","email":"igor.dmitriev@verygood.system","login":null,"count":1},{"name":"Icemap","email":"qizhi.wang@pingcap.com","login":null,"count":1},{"name":"Holger","email":"Holger","login":null,"count":1},{"name":"Henady Zakalusky","email":"hza@enonic.com","login":null,"count":1},{"name":"Gustavo Adolfo Rodríguez Libreros","email":"gustavo.adolfo.rodriguez.l@gmail.com","login":null,"count":1},{"name":"Graham Collinson","email":"graham.collinson@rdb-concepts.com","login":null,"count":1},{"name":"Giovanni Lovato","email":"heruan@aldu.net","login":null,"count":1},{"name":"Giovanni Lovato","email":"giovanni.lovato@saiv.it","login":null,"count":1},{"name":"Michael Hum","email":"Michael.Hum@cmail.carleton.ca","login":null,"count":1},{"name":"Richard Tingstad","email":"Richard.Tingstad@spk.no","login":null,"count":1},{"name":"Mark Robinson","email":"mrobinson@coverity.com","login":null,"count":1},{"name":"Marius Klein","email":"mklein@united-internet.de","login":null,"count":1},{"name":"Marek Šabo","email":"marek.sabo@merck.com","login":null,"count":1},{"name":"Marco Pelagatti","email":"marco.pelagatti@iongroup.com","login":null,"count":1},{"name":"Libor Ondrusek","email":"libor.ondrusek@artin.cz","login":null,"count":1},{"name":"Leoš Bitto","email":"Leos.Bitto@o2.cz","login":null,"count":1},{"name":"Andrew Lee Rubinger","email":"alr@jboss.org","login":null,"count":1},{"name":"Lars Storm","email":"lars.storm@systematic.com","login":null,"count":1},{"name":"Laabidi Raissi","email":"raissi.l@sfeir.com","login":null,"count":1},{"name":"Krzysztof Debski","email":"Krzysztof.Debski@IGT.com","login":null,"count":1},{"name":"Kristian Marinkovic","email":"kristian.marinkovic@gmail.com","login":null,"count":1},{"name":"Keshavan Santhanam","email":"Keshavan.Santhanam@microfocus.com","login":null,"count":1},{"name":"Julien Herr","email":"julien.herr@alcatel-lucent.com","login":null,"count":1},{"name":"Joël Marty","email":"joel.marty@intesens.com","login":null,"count":1},{"name":"CHAPEL Guillaume","email":"guillaume.chapel@soprasteria.com","login":null,"count":1},{"name":"Christiaan Rudolfs","email":"info@christiaanrudolfs.com","login":null,"count":1},{"name":"Brian Peterson","email":"BPeterson@deltadentalwi.com","login":null,"count":1},{"name":"Bolek Ziobrowski","email":"boleslaw.ziobrowski@mycomplianceoffice.com","login":null,"count":1},{"name":"Bogdan Calmac","email":"bcalmac@synapsense.com","login":null,"count":1},{"name":"Benjamin Hartmann","email":"benjamin.hartmann.ext@porscheinformatik.com","login":null,"count":1},{"name":"Didier Villevalois","email":"dvillevalois@clinigrid.com","login":null,"count":1},{"name":"Baptiste Mathus","email":"mathus.b@mipih.fr","login":null,"count":1},{"name":"Baptiste Mathus","email":"divers@batmat.net","login":null,"count":1},{"name":"Armin Krezović","email":"armin.krezovic@ziragroup.com","login":null,"count":1},{"name":"Anthony Richir","email":"arichir@altissia.com","login":null,"count":1},{"name":"Anthony Patricio","email":"apatrici@redhat.com","login":null,"count":1},{"name":"Andrei Badea","email":"andrei.badea@movzx.net","login":null,"count":1},{"name":"Alexander-Dukhno","email":"alexvic.amatory@gmail.com","login":null,"count":1},{"name":"Alex Nistico","email":"alex.nistico@onyxtech.com.au","login":null,"count":1},{"name":"gwenn","email":"45554+gwenn","login":"gwenn","count":1},{"name":"Furkan Kamaci","email":"furkan.kamaci@agmlab.com","login":null,"count":1},{"name":"Francesco Marino","email":"francesco.marino@cybaze.it","login":null,"count":1},{"name":"Florian Beaufumé","email":"","login":null,"count":1},{"name":"Evandro Pires da Silva","email":"evandro@MacBook-Pro-de-Evandro.local","login":null,"count":1},{"name":"Emanuele Gesuato","email":"emanuele.gesuato@finantix.com","login":null,"count":1},{"name":"EUROPE\\cdhib","email":"chaouki.dhib@altran.com","login":null,"count":1},{"name":"Dmitrii Pronichev","email":"d.pronichev@xello.ru","login":null,"count":1},{"name":"Dionis Argiri","email":"dionis.argiri@swedbank.ee","login":null,"count":1},{"name":"Dimitris Mandalidis","email":"dimitrios.mandalidis@external.trasysgroup.com","login":null,"count":1},{"name":"David Tombs","email":"david@libertyits.com","login":null,"count":1},{"name":"Daniel Mensinger","email":"daniel@mensoarch.localdomain","login":null,"count":1},{"name":"Dan Kristensen","email":"dk@cofman.com","login":null,"count":1},{"name":"Cliff Evans","email":"cliff.evans@anaplan.com","login":null,"count":1},{"name":"Christian Thiel","email":"christian.thiel@gec.io","login":null,"count":1},{"name":"Benedikt Biallowons","email":"benedikt.biallowons@sqanit.com","login":null,"count":1},{"name":"Bruce Brown","email":"bruce.brown@fastbridge.org","login":null,"count":1},{"name":"harikantverma","email":"46159252+harikantverma","login":"harikantverma","count":1},{"name":"Erin Schnabel","email":"ebullient@redhat.com","login":"ebullient","count":1},{"name":"Eskil Bylund","email":"eskil@vidispine.com","login":"eskil-vidispine","count":1},{"name":"Esteban Gehring","email":"esteban.gehring@bithost.ch","login":"macjohnny","count":1},{"name":"Evan Severson","email":"eseverson@gmail.com","login":"eseverson","count":1},{"name":"Farah Juma","email":"fjuma@redhat.com","login":"fjuma","count":1},{"name":"Fernando Guardiola","email":"fernando.guardiola@axisdata.net","login":"tufgupmi","count":1},{"name":"Filip Nguyen","email":"nguyen.filip@gmail.com","login":"minicuts","count":1},{"name":"Florian Hof","email":"florian@speleo.ch","login":"florianhof","count":1},{"name":"Florian Lopes","email":"florian.lopes@outlook.com","login":"f-lopes","count":1},{"name":"Francisco A. Lozano","email":"flozano@gmail.com","login":"flozano","count":1},{"name":"Nikita","email":"yorl1n","login":"yorl1n","count":1},{"name":"Francois van Delft","email":"francois.vandelft@saiglobal.com","login":"Francoisvandelft","count":1},{"name":"Freek de Bruijn","email":"freekdb@gmail.com","login":"FreekDB","count":1},{"name":"Gabriel Belingueres","email":"belingueres@gmail.com","login":"belingueres","count":1},{"name":"Gabriel Cunha","email":"gabriel.cunha@ninjarmm.com","login":"cunhazera","count":1},{"name":"Gary LosHuertos","email":"gary.loshuertos@gmail.com","login":"garyolsen","count":1},{"name":"Ales Justin","email":"ales.justin@gmail.com","login":"alesj","count":1},{"name":"Alessandro Lazarotti","email":"alessandrolt2@gmail.com","login":"lazarotti","count":1},{"name":"Alex","email":"50245770+kipevec","login":"kipevec","count":1},{"name":"Alex","email":"93376818+sashashura","login":"sashashura","count":1},{"name":"David Steinkopff","email":"david.steinkopff@x-root.de","login":"zeitiger","count":1},{"name":"Davide Angelocola","email":"davide.angelocola@gmail.com","login":"dfa1","count":1},{"name":"Dennis Katz","email":"git@lingo93.net","login":"Lingo93","count":1},{"name":"Dgray16","email":"vova235@gmail.com","login":"dgray16","count":1},{"name":"Henrik Hoffmann","email":"henrikdeluxe@aol.com","login":"henrikdeluxe","count":1},{"name":"Dimitrios Liapis","email":"dimitrisli@gmail.com","login":"dimitrisli","count":1},{"name":"Dmitriy Churilov","email":"churilov.dmitriy@gmail.com","login":"flexo0","count":1},{"name":"Dmitry Gusev","email":"dmitry.gusev@gmail.com","login":"dmitrygusev","count":1},{"name":"Dmitry Matveev","email":"dmitriy.g.matveev@gmail.com","login":"okutane","count":1},{"name":"DrBAXA","email":"DrBAXA@hotmail.com","login":"DrBAXA","count":1},{"name":"ENTERPRISE-X64\\bertiepinnock","email":"bertie.pinnock@gmail.com","login":"bertiepinnock","count":1},{"name":"Edward.Wilson","email":"ed.wilson2@hotmail.co.uk","login":"ed0906","count":1},{"name":"Henry Clout","email":"henry.clout@qumu.com","login":"bighenry","count":1},{"name":"Higor Tavares","email":"42852956+higortavares","login":"higortavares","count":1},{"name":"Himavanth","email":"contacthima@yahoo.com","login":"Himavanth","count":1},{"name":"Hirosato Hano","email":"hanohrs@gmail.com","login":"hanohrs","count":1},{"name":"Hyunjin Choi","email":"hyeonisism@gmail.com","login":"hyeonisism","count":1},{"name":"Idel Pivnitskiy","email":"Idel.Pivnitskiy@gmail.com","login":"idelpivnitskiy","count":1},{"name":"Igor Vaynberg","email":"igor.vaynberg@gmail.com","login":"ivaynberg","count":1},{"name":"Ivan Munic","email":"ivan.munic+github@gmail.com","login":"imunic","count":1},{"name":"Ivan Straka","email":"istraka@redhat.com","login":"istraka","count":1},{"name":"Ivo Hradek","email":"ivohradek@gmail.com","login":"hradecek","count":1},{"name":"Ivo Studensky","email":"istudens@redhat.com","login":"istudens","count":1},{"name":"JEONGJAEIK","email":"wodlr1207@naver.com","login":"JEONGJAEIK","count":1},{"name":"Jacques-Etienne Beaudet","email":"jebeaudet@coveo.com","login":"jebeaudet","count":1},{"name":"James Bodkin","email":"45513568+JBodkin","login":"JBodkin","count":1},{"name":"James Bodkin","email":"james.bodkin+amphora@amphora.net","login":"james-bodkin_amphora","count":1},{"name":"James Olsen","email":"james@coinzoom.com","login":"jimbogithub","count":1},{"name":"Gasper Kojek","email":"gkojek@gradle.com","login":"ribafish","count":1},{"name":"Gautham Kumar","email":"gautham.kumar@growthsourceft.com","login":"juja0","count":1},{"name":"George Vinokhodov","email":"e.vinokhodov@geoscan.aero","login":"geoscan-builder","count":1},{"name":"Gittenburg","email":"gittenburg@fsinf.at","login":"Gittenburg","count":1},{"name":"Greg Jones","email":"gregj@thesoftwarecottage.com.au","login":"gregjones60","count":1},{"name":"Gregorio Palamà","email":"gregoriopalama@gmail.com","login":"gregoriopalama","count":1},{"name":"Guilherme Silveira","email":"guilherme.silveira@caelum.com.br","login":"guilhermesilveira","count":1},{"name":"Guillermo González de Agüero","email":"ggam","login":"ggam","count":1},{"name":"Guy Veraghtert","email":"guy.veraghtert@gmail.com","login":"guyv","count":1},{"name":"Gwenneg Lepage","email":"gwenneg@gmail.com","login":"gwenneg","count":1},{"name":"HARPER Jon","email":"jon.harper87@gmail.com","login":"jonenst","count":1},{"name":"HGC","email":"harry.cummings@softwire.com","login":"hgcummings","count":1},{"name":"Hannes Rosenögger","email":"123haynes@gmail.com","login":"123Haynes","count":1},{"name":"Hassan AL Meftah","email":"hassan.al.meftah@oracle.com","login":"Elab4d1","count":1},{"name":"Henning Rohlfs","email":"henning.rohlfs@innogames.com","login":"xehonk","count":1},{"name":"Kankare Timo","email":"timo.kankare@insta.fi","login":"kankt","count":1},{"name":"Christian","email":"christianhoesel79@gmail.com","login":"ChristianHoesel","count":1},{"name":"Christian Ambach","email":"christian.ambach@codecentric.de","login":"der-ambi","count":1},{"name":"Christian Bürgi","email":"mr.boskoop@gmail.com","login":"boskoop","count":1},{"name":"Christian Schneider","email":"chris@die-schneider.net","login":"cschneider","count":1},{"name":"Brent Plump","email":"bplump@atlassian.com","login":"bplump","count":1},{"name":"Bradley Plies","email":"pliesb@yahoo.com","login":"bplies","count":1},{"name":"Bradley Hess","email":"bdhess@pobox.com","login":"bdhess","count":1},{"name":"Boris Byk","email":"boris.byk@gmail.com","login":"bbyk","count":1},{"name":"Bobo Häggström","email":"bobo.haggstrom@gmail.com","login":"bobobobo","count":1},{"name":"Benoit Lateltin","email":"blateltin@mirakl.com","login":"benoit-lateltin","count":1},{"name":"Benjamin Tegarden","email":"ben@arbitrage.hk","login":"ben-arbitrage","count":1},{"name":"0xC0FFE2","email":"github1@ncloud.sbs","login":"0xC0FFE2","count":1},{"name":"Belev","email":"martinbelev93@gmail.com","login":"belev","count":1},{"name":"Becca Gaspard","email":"beccagaspard@gmail.com","login":"beccagaspard","count":1},{"name":"Batbileg Dorj","email":"batbileg289@gmail.com","login":"batbileg289","count":1},{"name":"Bastien JANSEN","email":"bastien.jansen@gmx.com","login":"bjansen","count":1},{"name":"Danny Casady","email":"dcasady@championmt.com","login":"dpcasady","count":1},{"name":"Daninsky","email":"daninshit@gmail.com","login":"daninsky1","count":1},{"name":"Daniel Wu","email":"daniel.y.woo@gmail.com","login":"DanielYWoo","count":1},{"name":"Daniel Kraus","email":"daniel.kraus@mailbox.org","login":"beatngu13","count":1},{"name":"Daniel Gredler","email":"daniel.gredler@gmail.com","login":"gredler","count":1},{"name":"Damien Hollis","email":"damien.hollis@unimarket.com","login":"damienhollis","count":1},{"name":"Craig K","email":"kapp.craig@gmail.com","login":"TheCodePope","count":1},{"name":"Colm O hEigeartaigh","email":"coheigea@apache.org","login":"coheigea","count":1},{"name":"CodingFabian","email":"lange.fabian@gmail.com","login":"CodingFabian","count":1},{"name":"Clement Escoffier","email":"clement@apache.org","login":"cescoffier","count":1},{"name":"Christoph Rueger","email":"chrisrueger@gmail.com","login":"chrisrueger","count":1},{"name":"Christoph Pally","email":"christoph.pally@porscheinformatik.com","login":"chrisaige","count":1},{"name":"Dariush Moshiri","email":"dariush.moshiri@outlook.com","login":"dariush624","count":1},{"name":"Bruno Sofiato","email":"bruno.sofiato@gmail.com","login":"bsofiato","count":1},{"name":"CK Guven","email":"ckproductions.lab@gmail.com","login":"cklab","count":1},{"name":"Carsten Hammer","email":"carsten.hammer@t-online.de","login":"carstenartur","count":1},{"name":"Andreas Asplund","email":"andreas.asplund@lekab.com","login":"aspan","count":1},{"name":"Andre Azevedo","email":"andre.azevedo@gmail.com","login":"andreazevedo","count":1},{"name":"Anderson Calixto","email":"andersonbr@gmail.com","login":"andersonbr","count":1},{"name":"Alexey Nesterov","email":"email@alexnesterov.com","login":"alek-sys","count":1},{"name":"Alexander Iskuskov","email":"iskuskov@gmail.com","login":"Iskuskov","count":1},{"name":"Alex Kalashnikov","email":"neoasket@gmail.com","login":"neoasket","count":1},{"name":"Alex Belyaev","email":"alex.bel.izh@gmail.com","login":"alex-bel","count":1},{"name":"10urshin","email":"10urshin@gmail.com","login":"10urshin","count":1},{"name":"Adam Bryzak","email":"adam.github@bryzak.net","login":"abryzak","count":1},{"name":"Adrien Ferrand","email":"ferrand.ad@gmail.com","login":"adferrand","count":1},{"name":"Ahmed Ashour","email":"asashour@yahoo.com","login":"asashour","count":1},{"name":"Airton Lastori","email":"alastori@gmail.com","login":"alastori","count":1},{"name":"Albert Huzejrovic","email":"huzejrovicalbert@gmail.com","login":"huzejrovicalbert","count":1},{"name":"Aleks","email":"40366235+aleksandarsusnjar","login":"aleksandarsusnjar","count":1},{"name":"Aleksander Blomskøld","email":"aleksabl@gmail.com","login":"aleksabl","count":1},{"name":"Aleksei Tsvetkov","email":"a.e.tsvetkov@gmail.com","login":"a-e-tsvetkov","count":1},{"name":"Bastien JANSEN","email":"bastien.jansen@ca-ps.com","login":"bjansen-caps","count":1},{"name":"Dave Stephan","email":"dstephan@redhat.com","login":"dstephan99","count":1},{"name":"Baptiste Mathus","email":"batmat@batmat.net","login":"batmat","count":1},{"name":"Aurimas Niekis","email":"aurimas@niekis.lt","login":"aurimasniekis","count":1},{"name":"Asier Lostalé","email":"asier.lostale@openbravo.com","login":"alostale","count":1},{"name":"Arturas Sirvinskas","email":"asirvinskas@gmail.com","login":"asirvinskas","count":1},{"name":"Arlo Louis O'Keeffe","email":"MailToArlo@gmail.com","login":"ArloL","count":1},{"name":"Arkadiusz Biczewski","email":"info@axi.net.pl","login":"Axinet","count":1},{"name":"Arend v. Reinersdorff","email":"arend@arendvr.com","login":"arend-von-reinersdorff","count":1},{"name":"Arcadiy Ivanov","email":"arcadiy@ivanov.biz","login":"arcivanov","count":1},{"name":"Antoine Reilles","email":"areilles@gmail.com","login":"selliera","count":1},{"name":"Anthony Foulfoin","email":"anthony.foulfoin@carboatmedia.fr","login":"cbm-afoulfoin","count":1},{"name":"Anilabha Baral","email":"abaral@redhat.com","login":"anilabhabaral","count":1},{"name":"David M. Lloyd","email":"david.lloyd@redhat.com","login":"dmlloyd","count":1},{"name":"Andrew Judson","email":"Andrew.Judson1@gmail.com","login":"judsona","count":1},{"name":"Andreas Knees","email":"andreas.knees@nikem.de","login":"rasenderhase","count":1},{"name":"Ocean-Blue","email":"lee.shuchun@gmail.com","login":"Ocean-Blue","count":1},{"name":"Oleh Faizulin","email":"oleh.faizulin@gmail.com","login":"ofaizulin","count":1},{"name":"Oleksii Klochko","email":"klochkoalexey9@gmail.com","login":"OleksiiKlochko","count":1},{"name":"Oliver Kopp","email":"kopp.dev@gmail.com","login":"koppor","count":1},{"name":"Ory Warshenbrot","email":"ory.warshenbrot+github@teradata.com","login":"ory-teradata","count":1},{"name":"Oscar","email":"oscar.fanchin@gmail.com","login":"oscarfanchin","count":1},{"name":"Owen Farrell","email":"owen.farrell@gmail.com","login":"owenfarrell","count":1},{"name":"Paria","email":"51705869+pariaSadatHosseiny","login":"pariaSadatHosseiny","count":1},{"name":"Paul Lysak","email":"paul.lysak@gmail.com","login":"paul-lysak","count":1},{"name":"Paweł Stawicki","email":"pawelstawicki@gmail.com","login":"amorfis","count":1},{"name":"Peter","email":"peter@peterphi.com","login":"petergeneric","count":1},{"name":"Piotr Wolny","email":"gildur@gmail.com","login":"gildur","count":1},{"name":"PrairieLoneWolf","email":"prairielonewolf@gmail.com","login":"mestarshine","count":1},{"name":"Prasanth Mathialagan","email":"prasanthmathialagan@gmail.com","login":"prasanthmathialagan","count":1},{"name":"Rafael Lillo","email":"rafa_lillo@outlook.com","login":"lillo42","count":1},{"name":"Rafał Osiecki","email":"metempsychoza@wp.pl","login":"rosiecki","count":1},{"name":"Maximilian Zellhofer","email":"max.zellhofer@gmail.com","login":"mzellho","count":1},{"name":"Mehdi","email":"elmehdi.kzadri@gmail.com","login":"Meehdi","count":1},{"name":"Michael Clarke","email":"michael.m.clarke@gmail.com","login":"mc1arke","count":1},{"name":"Michael Edgar","email":"michael@xlate.io","login":"MikeEdgar","count":1},{"name":"Michael Nachmias","email":"michael.nachmias@fungible.com","login":"mnachmia31","count":1},{"name":"Michael Schnell","email":"michael@fuin.org","login":"michael-schnell","count":1},{"name":"Michael Trinh","email":"32150483+mitrinh","login":"mitrinh","count":1},{"name":"Mohammad Yasin Sadeghi","email":"36187886+myasinkaji","login":"myasinkaji","count":1},{"name":"Nazarii Bardiuk","email":"girafik.mail@gmail.com","login":"nbardiuk","count":1},{"name":"Neon Ngo","email":"neon@nngo.net","login":"nngo","count":1},{"name":"Nicholas Kim","email":"nicholaskim94@gmail.com","login":"nicholaskim94","count":1},{"name":"Nick","email":"n.v.golubev@gmail.com","login":"nivolg","count":1},{"name":"Nick Rayburn","email":"52075362+nrayburn-tech","login":"nrayburn-tech","count":1},{"name":"Nico Hinrichs","email":"n_hinrichs@taures.de","login":"nh2297","count":1},{"name":"Leonardo Nogueira Meireles","email":"123477726+LeonardoMeireles55","login":"LeonardoMeireles55","count":1},{"name":"Nikolay Mukhanov","email":"mukhanov@gmail.com","login":"mukhanov","count":1},{"name":"Sebastien Santschi","email":"github@santschi.dev","login":"santschi","count":1},{"name":"Sergey Astakhov","email":"sergeyastakhov@mail.ru","login":"sergeyastakhov","count":1},{"name":"Sergey Chernolyas","email":"sergey.chernolyas@gmail.com","login":"schernolyas","count":1},{"name":"Sergey Ponomarev","email":"stokito@gmail.com","login":"stokito","count":1},{"name":"Sergiu Dumitriu","email":"sergiu@xwiki.com","login":"sdumitriu","count":1},{"name":"Shubham Kalloli","email":"shubham.kalloli@est.tech","login":"shub-est","count":1},{"name":"Simon Convent","email":"simon@convnet.de","login":"sconvent","count":1},{"name":"Simon StJohn-Green","email":"Simon.StJohn-Green@softwire.com","login":"SimonStJG","count":1},{"name":"SirWayne","email":"melzer.dennis@gmail.com","login":"MelleD","count":1},{"name":"Staffan Hörke","email":"staffan.horke@maindialog.se","login":"StaffanHorke","count":1},{"name":"Stephanie Miller","email":"smiller@generalcode.com","login":"shysteph","count":1},{"name":"Steve Abbott","email":"steven.abbott@analyst1.com","login":"sabbott1877","count":1},{"name":"Steve Dighans","email":"139597170+stevedighans","login":"stevedighans","count":1},{"name":"Steven Barendregt","email":"steven.barendregt@kadaster.nl","login":"kad-barens","count":1},{"name":"Stevo Slavic","email":"sslavic@gmail.com","login":"sslavic","count":1},{"name":"Stoty","email":"stoty@stoty.hu","login":"stoty","count":1},{"name":"Rafi Shamim","email":"rafi@cockroachlabs.com","login":"rafiss","count":1},{"name":"Raja Kolli","email":"rajadilipkolli","login":"rajadilipkolli","count":1},{"name":"Renato Mameli","email":"renatomamel410@gmail.com","login":"renatomameli","count":1},{"name":"Richard Bradley","email":"Richard.Bradley@softwire.com","login":"RichardBradley","count":1},{"name":"Jason Jijón","email":"jasonex7@gmail.com","login":"jasonex7","count":1},{"name":"Richard Yhip","email":"richard.yhip@gmail.com","login":"yhippa","count":1},{"name":"Richard Záň","email":"zan.richard@gmail.com","login":"fRandOmizer","count":1},{"name":"Rico Neubauer","email":"R.Neubauer@seeburger.de","login":"MrEasy","count":1},{"name":"Robert Richter","email":"robert.c.richter@gmail.com","login":"Cantido","count":1},{"name":"Robin Anil","email":"r@tockhq.com","login":"robin-anil","count":1},{"name":"Rokko11","email":"richardvogel123@gmx.de","login":"Rokko11","count":1},{"name":"RunninglVlan","email":"RedCapShortCut@gmail.com","login":"RunninglVlan","count":1},{"name":"Russ Tennant","email":"russ@venturetech.net","login":"proteus-russ","count":1},{"name":"Sam De Block","email":"sam.deblock@unifly.aero","login":"SamDeBlock","count":1},{"name":"Samuel Andersson","email":"smulster@gmail.com","login":"trew","count":1},{"name":"Sande Gilda","email":"sgilda@redhat.com","login":"sgilda","count":1},{"name":"João Carlos Heringer Moreira","email":"joaochmoreira@gmail.com","login":"jcmoreira","count":1},{"name":"Julien Bras","email":"julienbras@sidoine.org","login":"julbrs","count":1},{"name":"Julien Fourment","email":"julien.fourment@gmail.com","login":"jfourment","count":1},{"name":"JustinKSU","email":"JustinKSU@gmail.com","login":"JustinKSU","count":1},{"name":"Kaden Sharpin","email":"kaden@cleaning-depot.ca","login":"kaden-sharpin","count":1},{"name":"Kaja Mohideen","email":"kaja-mohideen","login":"kaja-mohideen","count":1},{"name":"Matías Santurio","email":"matiassantuu@gmail.com","login":"matias-santurio","count":1},{"name":"Kedar Joshi","email":"kedar-joshi","login":"kedar-joshi","count":1},{"name":"Kim Hansen","email":"kim@rthansen.dk","login":"kimhanse","count":1},{"name":"Kirill Marchuk","email":"62mkv@mail.ru","login":"62mkv","count":1},{"name":"Kirill Vlasov","email":"kirill.vlasov@devfactory.com","login":"kirill-vlasov","count":1},{"name":"Klauswk","email":"klauswk1@hotmail.com","login":"Klauswk","count":1},{"name":"Knut Wannheden","email":"knut.wannheden@mobi.ch","login":"knutwannheden","count":1},{"name":"Kristoffer Lundberg","email":"kristoffer@cambio.se","login":"kristofferlundberg","count":1},{"name":"Kyrylo Merzlikin","email":"kirmerzlikin@gmail.com","login":"kirmerzlikin","count":1},{"name":"Labi0","email":"labiknight@gmail.com","login":"Labi0","count":1},{"name":"Jarkko Hyöty","email":"jarkko.hyoty@gofore.com","login":"jhyoty","count":1},{"name":"Francois Steyn","email":"fsteyn@tfyre.co.za","login":"TFyre","count":1},{"name":"Javad Alimohammadi","email":"bs.alimohammadi@gmail.com","login":"siahsang","count":1},{"name":"Jay Paulsen","email":"jay-paulsen@uiowa.edu","login":"jay-paulsen","count":1},{"name":"Jens Borrmann","email":"jebo0805@gmail.com","login":"jensborrmann","count":1},{"name":"Jesse Sightler","email":"jesse.sightler@gmail.com","login":"jsight","count":1},{"name":"Jezza","email":"jezzadabomb@gmail.com","login":"Jezza","count":1},{"name":"Jim Simon","email":"jim.simon@workiva.com","login":"jimsimon-wk","count":1},{"name":"JinMyung.K","email":"dcsc3500@naver.com","login":"dev3way","count":1},{"name":"Jocki Hendry","email":"jocki.hendry@gmail.com","login":"JockiHendry","count":1},{"name":"Joey Gao","email":"joey.gao@sap.com","login":"JoeyGaoSap","count":1},{"name":"Johannes Buehler","email":"jonnybbb@gmail.com","login":"jonnybbb","count":1},{"name":"Johannes Link","email":"link.johannes@pm.me","login":"johannes-link","count":1},{"name":"John Hardin","email":"john.hardin@peoplefluent.com","login":"pf-john-hardin","count":1},{"name":"Johno Crawford","email":"johno@sulake.com","login":"johnou","count":1},{"name":"Jonas Fügedi","email":"jonas@fugedi.se","login":"jonasfugedi","count":1},{"name":"Mahmoud Anouti","email":"manouti","login":"manouti","count":1},{"name":"Manuel Siggen","email":"manuel@siggen.ch","login":"Siggen","count":1},{"name":"Marcel Overdijk","email":"marceloverdijk@gmail.com","login":"marceloverdijk","count":1},{"name":"Marcel Triller","email":"marcel.triller@atruvia.de","login":"P6lS5gytpES99y9TvSg4","count":1},{"name":"Marcello","email":"marcello74@gmail.com","login":"marcellor","count":1},{"name":"Marco Behler","email":"marco@marcobehler.com","login":"marcobehler","count":1},{"name":"Marcus","email":"mgb.klimstra@gmail.com","login":"marcus-nl","count":1},{"name":"Martin Prebio","email":"martin.prebio@gmail.com","login":"bountin","count":1},{"name":"Martin Vietz","email":"git@martin.vietz.eu","login":"martin-v","count":1},{"name":"Masafumi Miura","email":"mmiura@redhat.com","login":"msfm","count":1},{"name":"Matt Drees","email":"matt.drees@cru.org","login":"mattdrees","count":1},{"name":"Matthias Kurz","email":"m.kurz@irregular.at","login":"mkurz","count":1},{"name":"Matus Zamborsky","email":"zamborsky@inqool.cz","login":"backslash47","count":1},{"name":"Max Tian","email":"max.tian.23@gmail.com","login":"cute-panda-baby","count":1},{"name":"Maxim Frolov","email":"frolovmx@gmail.com","login":"wrungel","count":1},{"name":"Maxime Falaize","email":"maxime.falaize@gmail.com","login":"mfalaize","count":1},{"name":"Ladislav Thon","email":"lthon@redhat.com","login":"Ladicek","count":1},{"name":"Laird Nelson","email":"ljnelson@gmail.com","login":"ljnelson","count":1},{"name":"Laurent Klock","email":"Laurent.Klock@arhs-cube.com","login":"klockla","count":1},{"name":"Laurent Martelli","email":"laurent.martelli@enercoop.org","login":"laurentmartelli","count":1},{"name":"Laurent SCHOELENS","email":"61973605+laurentschoelens","login":"laurentschoelens","count":1},{"name":"Leandro Taveras","email":"ltaveras@netflix.com","login":"ElTav","count":1},{"name":"Lee JiWon","email":"dlwldnjs1009@gmail.com","login":"dlwldnjs1009","count":1},{"name":"Lefteris Katiforis","email":"leuteriskatiforis@gmail.com","login":"Leuteris","count":1},{"name":"Legohuman","email":"legohuman@gmail.com","login":"Legohuman","count":1},{"name":"Lemongrass3110","email":"lemongrass@kstp.at","login":"Lemongrass3110","count":1},{"name":"Leonard Siu","email":"leonard.siu@gmail.com","login":"lsiu","count":1},{"name":"Livier","email":"lhirales@nearsoft.com","login":"lhirales","count":1},{"name":"Lukas Eder","email":"lukas.eder@gmail.com","login":"lukaseder","count":1},{"name":"Lukáš Vasek","email":"bilaak@gmail.com","login":"bilak","count":1},{"name":"MD. Mohiuddin Ahmed","email":"ahmed.mohi.duet@gmail.com","login":"ahmedmohiduet","count":1},{"name":"Maciej Walkowiak","email":"walkowiak.maciej@yahoo.com","login":"maciejwalkowiak","count":1},{"name":"StratosGiak","email":"efstratios.giak@gmail.com","login":"StratosGiak","count":1}],"past_year_committers":[{"name":"Gavin King","email":"gavin@hibernate.org","login":"gavinking","count":1485},{"name":"Koen Aers","email":"koen.aers@gmail.com","login":"koentsje","count":434},{"name":"Christian Beikov","email":"christian.beikov@gmail.com","login":"beikov","count":288},{"name":"marko-bekhta","email":"marko.prykladna@gmail.com","login":"marko-bekhta","count":186},{"name":"Andrea Boriero","email":"andrea@hibernate.org","login":"dreab8","count":159},{"name":"Steve Ebersole","email":"steve@hibernate.org","login":"sebersole","count":136},{"name":"Marco Belladelli","email":"marcobladel@gmail.com","login":"mbladel","count":91},{"name":"Yoann Rodière","email":"yoann@hibernate.org","login":"yrodiere","count":90},{"name":"Jenkins","email":"ci@hibernate.org","login":"Hibernate-CI","count":71},{"name":"Jan Schatteman","email":"jschatte@redhat.com","login":"jrenaat","count":41},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":35},{"name":"Sakthivel Subramanian","email":"sakthipvmj@gmail.com","login":"sakthivelmanii","count":28},{"name":"Čedomir Igaly","email":"cedomir.igaly@zg.t-com.hr","login":"cigaly","count":25},{"name":"loic_lefevre","email":"loic.lefevre@oracle.com","login":"loiclefevre","count":24},{"name":"Rayudu A L P","email":"abbireddynani@gmail.com","login":"rayudu3745","count":23},{"name":"Sanne Grinovero","email":"sanne@hibernate.org","login":"Sanne","count":22},{"name":"Daniël van Eeden","email":"git@myname.nl","login":"dveeden","count":18},{"name":"Stéphane Épardaud","email":"stef@epardaud.fr","login":"FroMage","count":14},{"name":"SweetWuXiaoMei","email":"sweetwuxiaomei@qq.com","login":"SweetWuXiaoMei","count":12},{"name":"Björn Kautler","email":"Bjoern@Kautler.net","login":"Vampire","count":11},{"name":"Davide D'Alto","email":"davide@hibernate.org","login":"DavideD","count":10},{"name":"Moad Elfatihi","email":"elfatihi.moad@gmail.com","login":"MoadElfatihi","count":10},{"name":"liubao68","email":"bismy@qq.com","login":"liubao68","count":9},{"name":"utsav-mehta-noovosoft","email":"utsav.mehta@noovosoft.com","login":"utsavNoovosoft","count":8},{"name":"Guillaume Smet","email":"guillaume@hibernate.org","login":"gsmet","count":7},{"name":"Peter Bambazek","email":"peter.bambazek@gmail.com","login":"peter1123581321","count":6},{"name":"Vladimír Kuruc","email":"kuruc.v@chemosvit.sk","login":"VladoKuruc","count":6},{"name":"lvydra","email":"lvydra@proton.me","login":"lvydra","count":6},{"name":"qlfyd123","email":"hajewoong@gmail.com","login":"qlfyd123","count":6},{"name":"Yanming Zhou","email":"zhouyanming@gmail.com","login":"quaff","count":5},{"name":"jjennnn","email":"jennifer.joby@ucdconnect.ie","login":"jjennnn","count":5},{"name":"Srltas","email":"kdm97912@gmail.com","login":"Srltas","count":4},{"name":"fanste","email":"mails@ist-einmalig.de","login":"fanste","count":4},{"name":"Yoobin Yoon","email":"yunyubin54@gmail.com","login":"yybmion","count":3},{"name":"Stefan Trienen","email":"stefan.dev.public@gmail.com","login":"Stefan-Tri","count":3},{"name":"Rob Green","email":"rob.green@greenbeard.io","login":"robwgreenjr","count":3},{"name":"awantikashinde","email":"awantikashinde1201@gmail.com","login":"awantika1201","count":3},{"name":"brinvex-dev1","email":"dev1@brinvex.com","login":"brinvex-dev1","count":3},{"name":"Minjae Seon","email":"eric@softsquared.com","login":"Aftermoon-dev","count":3},{"name":"Pavel Rogozhin","email":"rogozhinp@gmail.com","login":"rogozhinp","count":3},{"name":"Mohammed Ayman Khan","email":"mohammedaymankhan24@gmail.com","login":"MohammedAymanKhan","count":3},{"name":"ow186003","email":"“ory.warshenbrot@terdata.com”","login":null,"count":3},{"name":"Wander Winkelhorst","email":"w.winkelhorst@meineman.nl","login":null,"count":3},{"name":"Vincent Bouthinon","email":"v-bouthinon@efluid.fr","login":null,"count":3},{"name":"tcordel","email":"tcordel@enovacom.com","login":null,"count":2},{"name":"Vojtěch Šalbaba","email":"vsalbaba@redhat.com","login":null,"count":2},{"name":"stringintech","email":"stringintech@gmail.com","login":"stringintech","count":2},{"name":"Bahaa Zaid","email":"bahaa.zaid@pixelogicmedia.com","login":"bahaa","count":2},{"name":"Daniel Mensinger","email":"d.mensinger@tup.com","login":"mensinda","count":2},{"name":"Lansana DIOMANDE","email":"lansana.diomande@epfedu.fr","login":"Asanio06","count":2},{"name":"Luca Molteni","email":"volothamp@gmail.com","login":"lucamolteni","count":2},{"name":"oyeliseiev-ua","email":"oyeliseiev-ua@singlestore.com","login":"oyeliseiev-ua","count":2},{"name":"Moritz Kobel","email":"moritz.kobel@qube.ag","login":"mkobel","count":2},{"name":"Nathan Xu","email":"nathan.qingyang.xu@gmail.com","login":"NathanQingyangXu","count":2},{"name":"Terry Tao","email":"yueyang.tao@gmail.com","login":"TerryTaoYY","count":2},{"name":"ali","email":"ail77erfqagh99@gmail.com","login":null,"count":1},{"name":"perceptron8","email":"perceptron8","login":"perceptron8","count":1},{"name":"namucy","email":"wkdcjfdud13@gmail.com","login":"namuuCY","count":1},{"name":"kkywalk2","email":"kkywalk2@gmail.com","login":"kkywalk2","count":1},{"name":"isc-service","email":"RE-External@intersystems.com","login":"isc-service","count":1},{"name":"hoyeonyy","email":"highoption@naver.com","login":"hoyeonyy","count":1},{"name":"gtoison","email":"guillaume.toison@tobam.fr","login":"gtoison","count":1},{"name":"dohyun_lim","email":"dohyun_lim@tmaxsoft.com","login":"kuuku123","count":1},{"name":"dnovitski","email":"54758025+dnovitski","login":"dnovitski","count":1},{"name":"chrissyast","email":"31564153+chrissyast","login":"chrissyast","count":1},{"name":"carlblan","email":"carlos.a.blanco@oracle.com","login":"carlblan","count":1},{"name":"aliaksei.astashenka","email":"aleksey.astashenko@jemmic.com","login":"aleksey-astashenko-jemmic","count":1},{"name":"Yann Odeyer","email":"yann.odeyer@worldline.com","login":"jean-michel-apeupres","count":1},{"name":"Tom Gottfried","email":"tom.gottfried@intevation.de","login":null,"count":1},{"name":"Peter Aisher","email":"peter.aisher@me.com","login":null,"count":1},{"name":"Mike Mannion","email":"mike.mannion@karakun.com","login":null,"count":1},{"name":"Leoš Bitto","email":"Leos.Bitto@o2.cz","login":null,"count":1},{"name":"Dan Kristensen","email":"dk@cofman.com","login":null,"count":1},{"name":"Cliff Evans","email":"cliff.evans@anaplan.com","login":null,"count":1},{"name":"Christiaan Rudolfs","email":"info@christiaanrudolfs.com","login":null,"count":1},{"name":"Burkhard Graves","email":"graves@id-on.de","login":null,"count":1},{"name":"Armin Krezović","email":"armin.krezovic@ziragroup.com","login":null,"count":1},{"name":"Alex Nistico","email":"alex.nistico@onyxtech.com.au","login":null,"count":1},{"name":"rsingle","email":"rene.single@ametras.com","login":"BGNut","count":1},{"name":"saleese-gnu","email":"saleese@gnu.ac.kr","login":"saleese-gnu","count":1},{"name":"Ahmed Ashour","email":"asashour@yahoo.com","login":"asashour","count":1},{"name":"Airton Lastori","email":"alastori@gmail.com","login":"alastori","count":1},{"name":"Bastien JANSEN","email":"bastien.jansen@gmx.com","login":"bjansen","count":1},{"name":"Brian Stansberry","email":"bstansbe@ibm.com","login":"bstansberry","count":1},{"name":"Christoph Pally","email":"christoph.pally@porscheinformatik.com","login":"chrisaige","count":1},{"name":"Francesco Nigro","email":"nigro.fra@gmail.com","login":"franz1981","count":1},{"name":"Ivo Studensky","email":"istudens@redhat.com","login":"istudens","count":1},{"name":"JEONGJAEIK","email":"wodlr1207@naver.com","login":"JEONGJAEIK","count":1},{"name":"James Bodkin","email":"james.bodkin+amphora@amphora.net","login":"james-bodkin_amphora","count":1},{"name":"Kaden Sharpin","email":"kaden@cleaning-depot.ca","login":"kaden-sharpin","count":1},{"name":"Lee JiWon","email":"dlwldnjs1009@gmail.com","login":"dlwldnjs1009","count":1},{"name":"Mehdi","email":"elmehdi.kzadri@gmail.com","login":"Meehdi","count":1},{"name":"Michael Clarke","email":"michael.m.clarke@gmail.com","login":"mc1arke","count":1},{"name":"Michael Trinh","email":"32150483+mitrinh","login":"mitrinh","count":1},{"name":"Nick Rayburn","email":"52075362+nrayburn-tech","login":"nrayburn-tech","count":1},{"name":"Nico Hinrichs","email":"n_hinrichs@taures.de","login":"nh2297","count":1},{"name":"Ory Warshenbrot","email":"ory.warshenbrot+github@teradata.com","login":"ory-teradata","count":1},{"name":"Oscar","email":"oscar.fanchin@gmail.com","login":"oscarfanchin","count":1},{"name":"Renato Mameli","email":"renatomamel410@gmail.com","login":"renatomameli","count":1},{"name":"Richard Záň","email":"zan.richard@gmail.com","login":"fRandOmizer","count":1},{"name":"Shubham Kalloli","email":"shubham.kalloli@est.tech","login":"shub-est","count":1},{"name":"Steven Barendregt","email":"steven.barendregt@kadaster.nl","login":"kad-barens","count":1},{"name":"StratosGiak","email":"efstratios.giak@gmail.com","login":"StratosGiak","count":1},{"name":"SuperPat","email":"7791600+SuperPat45","login":"SuperPat45","count":1},{"name":"Sylvain Lecoy","email":"sylvain.lecoy@gmail.com","login":"itsmoonrack","count":1},{"name":"Thorben Janssen","email":"2053825+thjanssen","login":"thjanssen","count":1},{"name":"Werner Altewischer","email":"werner.altewischer@beatgridmedia.com","login":"werner77","count":1},{"name":"wafflejuice","email":"wafflejuice96@gmail.com","login":"hogeunchung","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-06-19T00:00:07.604Z","repositories_count":6263644,"commits_count":874930860,"contributors_count":35071341,"owners_count":1168627,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"hibernate/hibernate-orm","html_url":"https://github.com/hibernate/hibernate-orm","last_synced_at":"2026-05-12T05:00:24.984Z","status":null,"issues_count":25,"pull_requests_count":5883,"avg_time_to_close_issue":10148284.347826088,"avg_time_to_close_pull_request":7463059.844166843,"issues_closed_count":23,"pull_requests_closed_count":4723,"pull_request_authors_count":370,"issue_authors_count":11,"avg_comments_per_issue":0.96,"avg_comments_per_pull_request":1.185619581845997,"merged_pull_requests_count":3755,"bot_issues_count":0,"bot_pull_requests_count":55,"past_year_issues_count":4,"past_year_pull_requests_count":1304,"past_year_avg_time_to_close_issue":1965924.6666666667,"past_year_avg_time_to_close_pull_request":363425.5416149068,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":805,"past_year_pull_request_authors_count":97,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":1.0191717791411044,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":32,"past_year_merged_pull_requests_count":716,"created_at":"2023-05-11T10:33:48.512Z","updated_at":"2026-05-12T05:00:24.986Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hibernate%2Fhibernate-orm/issues","issue_labels_count":{"table":{"6.6":3,"6.4":1,"JIRA issue Test Case":1,"hana":1,"cockroachdb":1,"sybase":1,"5.3":1}},"pull_request_labels_count":{"table":{"6.6":218,"JIRA issue Test Case":182,"6.2":82,"dependencies":55,"7.1":55,"7.0":49,"java":47,"6.4":44,"6.5":33,"7.3":24,"Test case":21,"7.2":20,"5.3":16,"5.6":16,"hana":16,"cockroachdb":13,"5.4":12,"tck":11,"6.0":10,"wip/jpa4":10,"7.4":7,"jdk":7,"6.0?":6,"github_actions":6,"5.2":6,"sybase":6,"Ready for review":4,"Ready for integration":4,"Requires clarifications":3,"Impacts Hibernate Reactive":3,"Envers":3,"5.5":3,"Requires improvements":2,"Preview":2,"Requires changes":2,"Requires Gail":2,"tidb":1,"dev":1,"6.1":1}},"issue_author_associations_count":{"table":{"MEMBER":13,"CONTRIBUTOR":10,"NONE":2}},"pull_request_author_associations_count":{"table":{"MEMBER":3664,"CONTRIBUTOR":1674,"NONE":542,"COLLABORATOR":2,"OWNER":1}},"issue_authors":{"table":{"gavinking":10,"dreab8":4,"beikov":2,"sebersole":2,"mbladel":1,"dominikbielinski":1,"cigaly":1,"marko-bekhta":1,"jrenaat":1,"include42":1,"reda-alaoui":1}},"pull_request_authors":{"table":{"gavinking":1825,"beikov":578,"dreab8":494,"mbladel":452,"marko-bekhta":224,"sebersole":223,"jrenaat":213,"yrodiere":198,"cigaly":164,"mbellade":104,"Sanne":85,"quaff":84,"VladoKuruc":63,"NathanQingyangXu":56,"dependabot[bot]":54,"scottmarlow":36,"DavideD":32,"boutss":26,"loiclefevre":24,"maesenka":22,"peter1123581321":20,"koentsje":18,"gtoison":17,"MoadElfatihi":16,"marschall":15,"vladmihalcea":15,"karge-itestra":14,"dveeden":10,"lvydra":10,"dk2k":9,"FroMage":9,"jeonjonghyeok":9,"Asanio06":9,"victornoel":9,"mensinda":9,"sakthivelmanii":8,"stringintech":8,"reda-alaoui":8,"mehmetali2003":8,"SweetWuXiaoMei":8,"pb00067":8,"Akshit97":8,"simkam":7,"diegolovison":7,"ejannett":7,"itsmoonrack":7,"ettavolt":7,"leonschenk":7,"michaelfranz":6,"ememisya":6,"gsmet":6,"damianorenfer":6,"mapuci":6,"robwgreenjr":5,"songhaechan":5,"lrobot":5,"FelixDes":5,"kkuegler":5,"lucamolteni":5,"jwgmeligmeyling":5,"rayudu3745":5,"gregoriopalama":4,"chandre92":4,"xiaoye-2018":4,"theigl":4,"ShivamVerma380":4,"wytzevanderploeg":4,"jimsimon-wk":4,"bodhi-one":4,"cunhazera":4,"pabro":4,"milgner":4,"bwaldvogel":4,"a-e-tsvetkov":4,"andreybpanfilov":4,"ory-teradata":4,"shijianliang":4,"codylerum":4,"boskoop":4,"tcordel":4,"gkatiforis":4,"jmax01":4,"theit":4,"Vampire":4,"pariaSadatHosseiny":4,"garydgregory":3,"mrotteveel":3,"sabbott1877":3,"FULaBUla":3,"fmusolino":3,"tg-freigmbh":3,"liubao68":3,"schosin":3,"breglerj":3,"gwenn":3,"prithvitewatia":3,"gbadner":3,"rogozhinp":3,"emily-time":3,"phrabec":3,"GeorgEchterling":3,"isc-service":3,"Selaron":3,"bsofiato":3,"shysteph":3,"hibnico":3,"obourgain":3,"fantasticfinger":3,"oyeliseiev-ua":3,"hzerai":3,"utsavNoovosoft":3,"H-Lo":3,"g-tom":3,"kingg22":2,"junhyeongkim2":2,"hogeunchung":2,"Katalystical":2,"rusher":2,"ashetkar":2,"kaden-sharpin":2,"muzmov":2,"bilak":2,"ArcadyR":2,"gcastill":2,"xehonk":2,"BlackTazz89":2,"domids":2,"anilabhabaral":2,"jebeaudet":2,"luvarqpp":2,"mpecan":2,"Agoldstein1":2,"kennymacleod":2,"debashishbharali":2,"soul2zimate":2,"johnlinp":2,"arulsmv":2,"csaadaam":2,"imunic":2,"Vinche59":2,"chenhh021":2,"barreiro":2,"openai0229":2,"skarbgud":2,"icodetea":2,"kipevec":2,"qlfyd123":2,"OBreidenbach":2,"dyolcekaj":2,"kad-barens":2,"git-rbanerjee":2,"Huo662329":2,"aliJavaTar":2,"ChMThiel":2,"baranyit":2,"jake-goldsmith-1spatial":2,"Sam-Kruglov":2,"busitech":2,"coladict":2,"crudolfs":2,"dempe":2,"SimonStJG":2,"fcjm":2,"YongGoose":2,"jedichenbin":2,"JimSP":2,"chrisrueger":2,"stevedighans":2,"ThomasReinhardt":2,"carlblan":2,"plan11plan":2,"jay-m-paulsen":2,"daninsky1":2,"dnl50":2,"tobyhammett":2,"Stephen-Allen":2,"milosonator":2,"Maxouwell":2,"wen-ys":2,"dankristensen":2,"richardbizik":2,"Dan-Cao":2,"t-huebner":2,"mira-silhavy":2,"syeeuns":2,"sanghogu":2,"chanzxxx":2,"tshibata":2,"kuuku123":2,"cptwunderlich":2,"perceptron8":2,"Naros":2,"vincentstradiot":2,"fanste":2,"mrts":2,"yentlprojects":2,"ikucuze":2,"mikejhill":2,"OleksiiChumak":2,"torin-st":2,"pludov":2,"ArthurL4":2,"TomyLobo":2,"Sputnik-git":2,"BjornWater":2,"Elab4d1":2,"gaogaodepanpan":2,"ben-manes":2,"whitingjr":2,"wanderer2097":2,"bighenry":2,"lisandrofernandez":2,"renatomameli":2,"JBodkin-Amphora":2,"aepedraza":2,"sumita-mudgil":2,"jerepenttinen":2,"melonturtle":2,"Clopma":2,"luiscla27":2,"fssouza":2,"Siggen":2,"pb00068":2,"0xC0FFE2":2,"grooverdan":2,"flexo0":2,"gildur":2,"saleese":2,"gaol":2,"rguihard":2,"myasinkaji":2,"Adrodoc":2,"haster":2,"noetro":2,"AlexCoolen":2,"younjungpark":2,"NicklasWallgren":2,"Meehdi":2,"akarsh-jain":2,"lelmarir":2,"laurentschoelens":2,"dnovitski":2,"RobertDiPaolo":2,"mstrYoda":2,"GedMarc":2,"Kamii0909":1,"realabertian":1,"kirmerzlikin":1,"bbiallowons":1,"der-ambi":1,"khanhkhanhlele":1,"benoitbesson":1,"datazuul":1,"rworsnop":1,"ZeroWM":1,"ZIRAKrezovic":1,"bziobrowski":1,"EdouardLvdl":1,"Sun8642":1,"mkurz":1,"kokaia":1,"mkobel":1,"MariusKl":1,"rrmcguinness":1,"cescoffier":1,"chrissyast":1,"gastaldi":1,"thesivis":1,"vladimirmartinek":1,"aonnikov":1,"include42":1,"phalasOhpen":1,"ilia1243":1,"Stefan-Tri":1,"santschi":1,"jbescos":1,"KaiSuchomel":1,"nhuphucnguyen":1,"aclemons":1,"mzellho":1,"dominikbielinski":1,"ngavars":1,"PavelTurkish":1,"hugo-syn":1,"ningpengtao-coder":1,"peteraisher":1,"subijayb":1,"nomoreFt":1,"Rok93":1,"koehn":1,"anaconda875":1,"YGwan":1,"artbasov":1,"inpink":1,"asutosh936":1,"yakatrennes":1,"alek-sys":1,"datavisortedyu":1,"beng9re":1,"mipper":1,"MohammedAymanKhan":1,"nisrael":1,"Aftermoon-dev":1,"clementdenis":1,"aleksandarsusnjar":1,"GulSauce":1,"JeanMoravec":1,"kilink":1,"nikolabekcic":1,"bbanchev":1,"hurelhuyag":1,"bahaa":1,"EdgarScott":1,"JBodkin":1,"brinvex-dev1":1,"mz3944":1,"drahkrub":1,"SamuelGuillemet":1,"moriarty-s3a":1,"tsvendsen":1,"yybmion":1,"karmann-dm":1,"fheck":1,"mayur-bhindi":1,"alienisty":1,"Gxrvish":1,"heruan":1,"mpela81":1,"morrica":1,"stevestorey":1,"sujl95":1,"blafond":1,"ctabin":1,"tomas-c":1,"schernolyas":1,"jjennnn":1,"vsalbaba":1,"dmlloyd":1,"bill-3178":1,"stokito":1,"bendiscz":1,"mgtriffid":1,"yunusevren":1,"JooHyukKim":1,"tradeshift-renovate[bot]":1,"mc1arke":1,"dmproni":1,"LeonardoMeireles55":1,"jonenst":1,"rgansevles":1,"laDok8":1,"asashour":1,"vdotjansen":1,"HJK181":1,"birdoplank":1,"fRandOmizer":1,"TFyre":1,"qinxi":1,"dev3way":1,"The-Huginn":1,"jhyoty":1,"nrayburn-tech":1,"brisvag":1,"BGNut":1,"OleksiiKlochko":1,"yafna":1,"LeosBitto":1,"Pankraz76":1,"artaban":1,"martaisty":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-05-12T00:00:09.018Z","repositories_count":14586219,"issues_count":34345838,"pull_requests_count":112445996,"authors_count":11260016,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{}},"past_year_pull_request_labels_count":{"table":{"6.6":70,"7.1":52,"7.0":49,"dependencies":32,"6.2":28,"java":27,"7.3":24,"7.2":20,"wip/jpa4":10,"JIRA issue Test Case":10,"7.4":7,"jdk":7,"github_actions":5,"5.3":5,"hana":4,"6.4":3,"5.6":3,"Envers":3,"tck":2,"cockroachdb":2,"Test case":1,"tidb":1}},"past_year_issue_author_associations_count":{"table":{"MEMBER":4}},"past_year_pull_request_author_associations_count":{"table":{"MEMBER":1033,"CONTRIBUTOR":162,"NONE":102,"COLLABORATOR":2}},"past_year_issue_authors":{"table":{"gavinking":2,"marko-bekhta":1,"sebersole":1}},"past_year_pull_request_authors":{"table":{"gavinking":398,"beikov":183,"marko-bekhta":106,"mbellade":102,"dreab8":75,"yrodiere":58,"sebersole":39,"jrenaat":32,"dependabot[bot]":32,"peter1123581321":20,"cigaly":18,"koentsje":12,"Sanne":11,"dveeden":10,"victornoel":9,"sakthivelmanii":8,"itsmoonrack":7,"diegolovison":7,"MoadElfatihi":6,"loiclefevre":6,"michaelfranz":6,"scottmarlow":5,"boutss":5,"robwgreenjr":5,"rayudu3745":5,"xiaoye-2018":4,"Vampire":4,"tcordel":4,"FroMage":4,"ory-teradata":4,"SweetWuXiaoMei":4,"mbladel":4,"ShivamVerma380":4,"DavideD":4,"mehmetali2003":4,"sabbott1877":3,"isc-service":3,"gsmet":3,"Asanio06":3,"utsavNoovosoft":3,"rogozhinp":3,"lvydra":2,"renatomameli":2,"liubao68":2,"Meehdi":2,"mensinda":2,"mira-silhavy":2,"quaff":2,"qlfyd123":2,"kuuku123":2,"kingg22":2,"JBodkin-Amphora":2,"NathanQingyangXu":2,"g-tom":2,"dnovitski":2,"dankristensen":2,"chanzxxx":2,"carlblan":2,"VladoKuruc":2,"breglerj":2,"ArcadyR":2,"aliJavaTar":2,"peteraisher":1,"Aftermoon-dev":1,"rgansevles":1,"Stefan-Tri":1,"vsalbaba":1,"yybmion":1,"ZIRAKrezovic":1,"alienisty":1,"asashour":1,"bahaa":1,"BGNut":1,"brinvex-dev1":1,"bwaldvogel":1,"chrissyast":1,"ettavolt":1,"fRandOmizer":1,"gtoison":1,"GulSauce":1,"Gxrvish":1,"ilia1243":1,"inpink":1,"jbescos":1,"JeanMoravec":1,"jjennnn":1,"khanhkhanhlele":1,"laDok8":1,"LeosBitto":1,"lucamolteni":1,"mipper":1,"mkobel":1,"MohammedAymanKhan":1,"mrotteveel":1,"nrayburn-tech":1,"Pankraz76":1}},"maintainers":[{"table":{"login":"gavinking","count":1835,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"}},{"table":{"login":"beikov","count":281,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"}},{"table":{"login":"dreab8","count":271,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"}},{"table":{"login":"mbladel","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"}},{"table":{"login":"marko-bekhta","count":225,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"}},{"table":{"login":"sebersole","count":225,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"}},{"table":{"login":"yrodiere","count":198,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"}},{"table":{"login":"mbellade","count":104,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"}},{"table":{"login":"Sanne","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"}},{"table":{"login":"jrenaat","count":74,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"}},{"table":{"login":"scottmarlow","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"}},{"table":{"login":"DavideD","count":32,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"}},{"table":{"login":"maesenka","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maesenka"}},{"table":{"login":"koentsje","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"}},{"table":{"login":"gsmet","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}},{"table":{"login":"loiclefevre","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/loiclefevre"}},{"table":{"login":"Naros","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Naros"}},{"table":{"login":"lucamolteni","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lucamolteni"}},{"table":{"login":"brisvag","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brisvag"}},{"table":{"login":"blafond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/blafond"}}],"active_maintainers":[{"table":{"login":"gavinking","count":400,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gavinking"}},{"table":{"login":"beikov","count":183,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beikov"}},{"table":{"login":"marko-bekhta","count":107,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/marko-bekhta"}},{"table":{"login":"mbellade","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbellade"}},{"table":{"login":"dreab8","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dreab8"}},{"table":{"login":"yrodiere","count":58,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yrodiere"}},{"table":{"login":"sebersole","count":40,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sebersole"}},{"table":{"login":"jrenaat","count":32,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrenaat"}},{"table":{"login":"koentsje","count":12,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/koentsje"}},{"table":{"login":"Sanne","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Sanne"}},{"table":{"login":"scottmarlow","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/scottmarlow"}},{"table":{"login":"DavideD","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/DavideD"}},{"table":{"login":"mbladel","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mbladel"}},{"table":{"login":"gsmet","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gsmet"}},{"table":{"login":"loiclefevre","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/loiclefevre"}},{"table":{"login":"lucamolteni","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lucamolteni"}}]}},"events":{"total":{"CreateEvent":69,"CommitCommentEvent":56,"ReleaseEvent":52,"WatchEvent":342,"DeleteEvent":9,"IssueCommentEvent":1864,"PushEvent":1341,"PullRequestEvent":2881,"PullRequestReviewCommentEvent":1879,"PullRequestReviewEvent":1724,"ForkEvent":191},"last_year":{"CreateEvent":69,"CommitCommentEvent":56,"ReleaseEvent":52,"WatchEvent":343,"DeleteEvent":9,"IssueCommentEvent":1873,"PushEvent":1352,"PullRequestEvent":2895,"PullRequestReviewCommentEvent":1885,"PullRequestReviewEvent":1738,"ForkEvent":193}},"keywords":["database","envers","hibernate","hibernate-orm","jakarta-persistence","jakartaee","java","jdbc","jpa","object-relational-mapper","object-relational-mapping","orm","persistence","persistence-framework","sql"],"dependencies":[{"ecosystem":"actions","filepath":".github/workflows/codeql.yml","sha":null,"kind":"manifest","created_at":"2023-01-13T16:22:13.157Z","updated_at":"2023-01-13T16:22:13.157Z","repository_link":"https://github.com/hibernate/hibernate-orm/blob/main/.github/workflows/codeql.yml","dependencies":[{"id":6890180467,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6890180468,"package_name":"github/codeql-action/init","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6890180469,"package_name":"github/codeql-action/autobuild","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6890180470,"package_name":"github/codeql-action/analyze","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"maven","filepath":"documentation/src/main/asciidoc/quickstart/tutorials/entitymanager/pom.xml","sha":null,"kind":"manifest","created_at":"2023-01-13T16:22:13.345Z","updated_at":"2023-01-13T16:22:13.345Z","repository_link":"https://github.com/hibernate/hibernate-orm/blob/main/documentation/src/main/asciidoc/quickstart/tutorials/entitymanager/pom.xml","dependencies":[{"id":6890181697,"package_name":"org.hibernate:hibernate-core","ecosystem":"maven","requirements":"$version","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"maven","filepath":"documentation/src/main/asciidoc/quickstart/tutorials/envers/pom.xml","sha":null,"kind":"manifest","created_at":"2023-01-13T16:22:13.437Z","updated_at":"2023-01-13T16:22:13.437Z","repository_link":"https://github.com/hibernate/hibernate-orm/blob/main/documentation/src/main/asciidoc/quickstart/tutorials/envers/pom.xml","dependencies":[{"id":6890181965,"package_name":"org.hibernate:hibernate-envers","ecosystem":"maven","requirements":"$version","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"maven","filepath":"documentation/src/main/asciidoc/quickstart/tutorials/pom.xml","sha":null,"kind":"manifest","created_at":"2023-01-13T16:22:13.507Z","updated_at":"2023-01-13T16:22:13.507Z","repository_link":"https://github.com/hibernate/hibernate-orm/blob/main/documentation/src/main/asciidoc/quickstart/tutorials/pom.xml","dependencies":[{"id":6890182177,"package_name":"org.hibernate:hibernate-core","ecosystem":"maven","requirements":"$version","direct":true,"kind":"runtime","optional":false},{"id":6890182178,"package_name":"org.slf4j:slf4j-simple","ecosystem":"maven","requirements":"$slf4j","direct":true,"kind":"runtime","optional":false},{"id":6890182179,"package_name":"junit:junit","ecosystem":"maven","requirements":"$junit","direct":true,"kind":"runtime","optional":false},{"id":6890182180,"package_name":"com.h2database:h2","ecosystem":"maven","requirements":"$h2","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"maven","filepath":"local-build-plugins/build.gradle","sha":null,"kind":"manifest","created_at":"2023-01-13T16:22:13.596Z","updated_at":"2023-01-13T16:22:13.596Z","repository_link":"https://github.com/hibernate/hibernate-orm/blob/main/local-build-plugins/build.gradle","dependencies":[{"id":6890182358,"package_name":"io.smallrye:jandex","ecosystem":"maven","requirements":"3.0.0","direct":true,"kind":"implementation","optional":false},{"id":6890182359,"package_name":"org.apache.httpcomponents:httpclient","ecosystem":"maven","requirements":"4.5.13","direct":true,"kind":"implementation","optional":false},{"id":6890182360,"package_name":"jakarta.json.bind:jakarta.json.bind-api","ecosystem":"maven","requirements":"2.0.0","direct":true,"kind":"implementation","optional":false},{"id":6890182364,"package_name":"jakarta.json:jakarta.json-api","ecosystem":"maven","requirements":"2.0.1","direct":true,"kind":"implementation","optional":false},{"id":6890182365,"package_name":"org.eclipse:yasson","ecosystem":"maven","requirements":"2.0.4","direct":true,"kind":"implementation","optional":false}]},{"ecosystem":"maven","filepath":"tooling/hibernate-gradle-plugin/src/test/resources/projects/multi-part-source-set-name/build.gradle","sha":null,"kind":"manifest","created_at":"2023-01-13T16:22:13.702Z","updated_at":"2023-01-13T16:22:13.702Z","repository_link":"https://github.com/hibernate/hibernate-orm/blob/main/tooling/hibernate-gradle-plugin/src/test/resources/projects/multi-part-source-set-name/build.gradle","dependencies":[{"id":6890182444,"package_name":"org.hibernate.orm:hibernate-core","ecosystem":"maven","requirements":"6.1.0.Final","direct":true,"kind":"implementation","optional":false}]},{"ecosystem":"maven","filepath":"tooling/hibernate-gradle-plugin/src/test/resources/projects/simple/build.gradle","sha":null,"kind":"manifest","created_at":"2023-01-13T16:22:13.751Z","updated_at":"2023-01-13T16:22:13.751Z","repository_link":"https://github.com/hibernate/hibernate-orm/blob/main/tooling/hibernate-gradle-plugin/src/test/resources/projects/simple/build.gradle","dependencies":[{"id":6890182663,"package_name":"org.hibernate.orm:hibernate-core","ecosystem":"maven","requirements":"6.1.0.Final","direct":true,"kind":"implementation","optional":false}]},{"ecosystem":"maven","filepath":"tooling/hibernate-gradle-plugin/src/test/resources/projects/simple-kotlin/build.gradle","sha":null,"kind":"manifest","created_at":"2023-01-13T16:22:13.833Z","updated_at":"2023-01-13T16:22:13.833Z","repository_link":"https://github.com/hibernate/hibernate-orm/blob/main/tooling/hibernate-gradle-plugin/src/test/resources/projects/simple-kotlin/build.gradle","dependencies":[{"id":6890182671,"package_name":"org.hibernate.orm:hibernate-core","ecosystem":"maven","requirements":"6.1.0.Final","direct":true,"kind":"implementation","optional":false}]},{"ecosystem":"maven","filepath":"build.gradle","sha":null,"kind":"manifest","created_at":"2024-01-03T17:34:24.167Z","updated_at":"2024-01-03T17:34:24.167Z","repository_link":"https://github.com/hibernate/hibernate-orm/blob/main/build.gradle","dependencies":[]},{"ecosystem":"maven","filepath":"documentation/src/main/asciidoc/quickstart/tutorials/annotations/pom.xml","sha":null,"kind":"manifest","created_at":"2024-01-03T17:34:24.189Z","updated_at":"2024-01-03T17:34:24.189Z","repository_link":"https://github.com/hibernate/hibernate-orm/blob/main/documentation/src/main/asciidoc/quickstart/tutorials/annotations/pom.xml","dependencies":[]},{"ecosystem":"actions","filepath":".github/workflows/ci-report.yml","sha":null,"kind":"manifest","created_at":"2025-04-10T18:22:18.456Z","updated_at":"2025-04-10T18:22:18.456Z","repository_link":"https://github.com/hibernate/hibernate-orm/blob/main/.github/workflows/ci-report.yml","dependencies":[{"id":22630311433,"package_name":"actions/checkout","ecosystem":"actions","requirements":"11bd71901bbe5b1630ceea73d27597364c9af683","direct":true,"kind":"composite","optional":false},{"id":22630311434,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"3a4f6e1af504cf6a31855fa899c6aa5355ba6c12","direct":true,"kind":"composite","optional":false},{"id":22630311435,"package_name":"actions/cache/restore","ecosystem":"actions","requirements":"1bd1e32a3bdc45362d1e726936510720a7c30a57","direct":true,"kind":"composite","optional":false},{"id":22630311436,"package_name":"actions/download-artifact","ecosystem":"actions","requirements":"fa0a91b85d4f404e444e00e005971372dc801d16","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/ci.yml","sha":null,"kind":"manifest","created_at":"2025-04-10T18:22:18.547Z","updated_at":"2025-04-10T18:22:18.547Z","repository_link":"https://github.com/hibernate/hibernate-orm/blob/main/.github/workflows/ci.yml","dependencies":[{"id":22630311966,"package_name":"actions/checkout","ecosystem":"actions","requirements":"11bd71901bbe5b1630ceea73d27597364c9af683","direct":true,"kind":"composite","optional":false},{"id":22630311967,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"3a4f6e1af504cf6a31855fa899c6aa5355ba6c12","direct":true,"kind":"composite","optional":false},{"id":22630311968,"package_name":"actions/cache","ecosystem":"actions","requirements":"1bd1e32a3bdc45362d1e726936510720a7c30a57","direct":true,"kind":"composite","optional":false},{"id":22630311969,"package_name":"actions/cache/restore","ecosystem":"actions","requirements":"1bd1e32a3bdc45362d1e726936510720a7c30a57","direct":true,"kind":"composite","optional":false},{"id":22630311970,"package_name":"actions/upload-artifact","ecosystem":"actions","requirements":"65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08","direct":true,"kind":"composite","optional":false},{"id":22630311971,"package_name":"graalvm/setup-graalvm","ecosystem":"actions","requirements":"aafbedb8d382ed0ca6167d3a051415f20c859274","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"maven","filepath":"tooling/hibernate-gradle-plugin/src/test/resources/projects/hbm/build.gradle","sha":null,"kind":"manifest","created_at":"2025-04-10T18:22:21.059Z","updated_at":"2025-04-10T18:22:21.059Z","repository_link":"https://github.com/hibernate/hibernate-orm/blob/main/tooling/hibernate-gradle-plugin/src/test/resources/projects/hbm/build.gradle","dependencies":[{"id":22630313589,"package_name":"org.hibernate.orm:hibernate-core","ecosystem":"maven","requirements":"6.1.0.Final","direct":true,"kind":"implementation","optional":false}]},{"ecosystem":"maven","filepath":"tooling/hibernate-gradle-plugin/src/test/resources/projects/simple-moduleinfo/build.gradle","sha":null,"kind":"manifest","created_at":"2025-04-10T18:22:21.923Z","updated_at":"2025-04-10T18:22:21.923Z","repository_link":"https://github.com/hibernate/hibernate-orm/blob/main/tooling/hibernate-gradle-plugin/src/test/resources/projects/simple-moduleinfo/build.gradle","dependencies":[{"id":22630314182,"package_name":"org.hibernate.orm:hibernate-core","ecosystem":"maven","requirements":"6.1.0.Final","direct":true,"kind":"implementation","optional":false},{"id":22630314185,"package_name":"jakarta.annotation:jakarta.annotation-api","ecosystem":"maven","requirements":"2.1.1","direct":true,"kind":"implementation","optional":false}]},{"ecosystem":"maven","filepath":"tooling/hibernate-maven-plugin/src/it/enhance/pom.xml","sha":null,"kind":"manifest","created_at":"2025-04-10T18:22:22.091Z","updated_at":"2025-04-10T18:22:22.091Z","repository_link":"https://github.com/hibernate/hibernate-orm/blob/main/tooling/hibernate-maven-plugin/src/it/enhance/pom.xml","dependencies":[{"id":22630314421,"package_name":"org.hibernate.orm:hibernate-core","ecosystem":"maven","requirements":"7.0.0.Beta1","direct":true,"kind":"runtime","optional":false},{"id":22630314422,"package_name":"jakarta.persistence:jakarta.persistence-api","ecosystem":"maven","requirements":"3.2.0","direct":true,"kind":"runtime","optional":false}]}],"score":37.3345127336098,"created_at":"2025-08-29T08:53:37.439Z","updated_at":"2026-06-20T07:30:28.586Z","avatar_url":"https://github.com/hibernate.png","language":"Java","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/362794","html_url":"https://summary.ecosyste.ms/projects/362794"}