{"id":368338,"url":"https://github.com/codahale/metrics","last_synced_at":"2026-06-19T14:02:08.023Z","repository":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":46,"subscribers_count":1,"default_branch":"master","last_synced_at":"2026-06-06T08:03:47.906Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2026-06-06T04:59:13.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34055249,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-08T02:00:07.615Z","response_time":111,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"packages":[{"id":4663578,"name":"com.codahale.metrics:metrics-jdbi","ecosystem":"maven","description":"A JDBI wrapper providing Metrics instrumentation of query durations and rates.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.codahale.metrics","versions_count":6,"first_release_published_at":"2013-04-22T15:57:13.000Z","latest_release_published_at":"2014-02-17T00:33:32.000Z","latest_release_number":"3.0.2","last_synced_at":"2026-06-06T08:00:39.558Z","created_at":"2022-07-25T17:45:50.929Z","updated_at":"2026-06-06T08:00:39.558Z","registry_url":"https://central.sonatype.com/artifact/com.codahale.metrics/metrics-jdbi/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.codahale.metrics/metrics-jdbi/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:52.930Z","dependent_packages_count":8,"downloads":null,"downloads_period":null,"dependent_repos_count":7,"rankings":{"downloads":null,"dependent_repos_count":9.289160076657048,"dependent_packages_count":7.4612459373566935,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":null,"average":14.218400495026703},"purl":"pkg:maven/com.codahale.metrics/metrics-jdbi","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-jdbi","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-jdbi","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.codahale.metrics:metrics-jdbi/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jdbi/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jdbi/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jdbi/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jdbi/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jdbi/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jdbi/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4790594,"name":"com.yammer.metrics:metrics-healthchecks","ecosystem":"maven","description":"Yammer's Metrics library.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.yammer.metrics","versions_count":1,"first_release_published_at":"2013-04-01T20:44:27.000Z","latest_release_published_at":"2013-04-01T20:44:27.000Z","latest_release_number":"3.0.0-BETA1","last_synced_at":"2026-06-06T08:00:45.763Z","created_at":"2022-07-26T12:20:51.802Z","updated_at":"2026-06-06T08:00:45.764Z","registry_url":"https://central.sonatype.com/artifact/com.yammer.metrics/metrics-healthchecks/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.yammer.metrics/metrics-healthchecks/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:54.984Z","dependent_packages_count":2,"downloads":null,"downloads_period":null,"dependent_repos_count":4,"rankings":{"downloads":null,"dependent_repos_count":12.117941313703149,"dependent_packages_count":23.153712600151792,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":null,"average":18.848712469987003},"purl":"pkg:maven/com.yammer.metrics/metrics-healthchecks","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-healthchecks","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-healthchecks","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.yammer.metrics:metrics-healthchecks/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-healthchecks/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-healthchecks/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-healthchecks/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-healthchecks/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-healthchecks/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-healthchecks/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4663570,"name":"com.codahale.metrics:metrics-core","ecosystem":"maven","description":"Metrics is a Java library which gives you unparalleled insight into what your code does in production. Metrics provides a powerful toolkit of ways to measure the behavior of critical components in your production environment.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.codahale.metrics","versions_count":6,"first_release_published_at":"2013-04-22T15:54:11.000Z","latest_release_published_at":"2014-02-17T00:31:39.000Z","latest_release_number":"3.0.2","last_synced_at":"2026-06-06T08:00:46.992Z","created_at":"2022-07-25T17:45:45.108Z","updated_at":"2026-06-06T08:00:46.993Z","registry_url":"https://central.sonatype.com/artifact/com.codahale.metrics/metrics-core/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.codahale.metrics/metrics-core/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:52.978Z","dependent_packages_count":468,"downloads":null,"downloads_period":null,"dependent_repos_count":4376,"rankings":{"downloads":null,"dependent_repos_count":0.14318126748463555,"dependent_packages_count":0.17121676041869008,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":0.6121750135671761,"average":8.209953801512714},"purl":"pkg:maven/com.codahale.metrics/metrics-core","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-core","docker_dependents_count":594,"docker_downloads_count":61709728,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-core","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.codahale.metrics:metrics-core/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-core/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-core/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-core/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-core/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-core/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-core/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4663576,"name":"com.codahale.metrics:metrics-jvm","ecosystem":"maven","description":"A set of classes which allow you to monitor critical aspects of your Java Virtual Machine using Metrics.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.codahale.metrics","versions_count":6,"first_release_published_at":"2013-04-22T15:54:45.000Z","latest_release_published_at":"2014-02-17T00:32:03.000Z","latest_release_number":"3.0.2","last_synced_at":"2026-06-06T08:01:00.068Z","created_at":"2022-07-25T17:45:50.656Z","updated_at":"2026-06-06T08:01:00.068Z","registry_url":"https://central.sonatype.com/artifact/com.codahale.metrics/metrics-jvm/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.codahale.metrics/metrics-jvm/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:53.810Z","dependent_packages_count":79,"downloads":null,"downloads_period":null,"dependent_repos_count":1212,"rankings":{"downloads":null,"dependent_repos_count":0.3440355490050404,"dependent_packages_count":0.9119545344406017,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":0.9451966189195521,"average":8.464876533691655},"purl":"pkg:maven/com.codahale.metrics/metrics-jvm","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-jvm","docker_dependents_count":110,"docker_downloads_count":14943029,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-jvm","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.codahale.metrics:metrics-jvm/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jvm/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jvm/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jvm/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jvm/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jvm/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jvm/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4790598,"name":"com.yammer.metrics:metrics-jvm","ecosystem":"maven","description":"Yammer's Metrics library.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.yammer.metrics","versions_count":1,"first_release_published_at":"2013-04-01T20:43:55.000Z","latest_release_published_at":"2013-04-01T20:43:55.000Z","latest_release_number":"3.0.0-BETA1","last_synced_at":"2026-06-06T08:01:02.973Z","created_at":"2022-07-26T12:20:54.097Z","updated_at":"2026-06-06T08:01:02.973Z","registry_url":"https://central.sonatype.com/artifact/com.yammer.metrics/metrics-jvm/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.yammer.metrics/metrics-jvm/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:52.988Z","dependent_packages_count":2,"downloads":null,"downloads_period":null,"dependent_repos_count":6,"rankings":{"downloads":null,"dependent_repos_count":10.022288216882574,"dependent_packages_count":23.153712600151792,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":null,"average":18.32479919578186},"purl":"pkg:maven/com.yammer.metrics/metrics-jvm","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-jvm","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-jvm","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.yammer.metrics:metrics-jvm/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jvm/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jvm/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jvm/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jvm/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jvm/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jvm/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4790596,"name":"com.yammer.metrics:metrics-aop","ecosystem":"maven","description":"Yammer's Metrics library.","homepage":"http://dropwizard.codahale.com/","licenses":"The MIT License","normalized_licenses":["MIT"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.yammer.metrics","versions_count":1,"first_release_published_at":"2011-12-17T02:07:15.000Z","latest_release_published_at":"2011-12-17T02:07:15.000Z","latest_release_number":"2.0.0-BETA18","last_synced_at":"2026-06-06T08:01:05.324Z","created_at":"2022-07-26T12:20:53.924Z","updated_at":"2026-06-06T08:01:05.325Z","registry_url":"https://central.sonatype.com/artifact/com.yammer.metrics/metrics-aop/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.yammer.metrics/metrics-aop/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:54.560Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":1,"rankings":{"downloads":null,"dependent_repos_count":20.767691897942793,"dependent_packages_count":32.97975236649599,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":null,"average":23.467660057632962},"purl":"pkg:maven/com.yammer.metrics/metrics-aop","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-aop","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-aop","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.yammer.metrics:metrics-aop/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-aop/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-aop/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-aop/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-aop/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-aop/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-aop/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4663574,"name":"com.codahale.metrics:metrics-logback","ecosystem":"maven","description":"An instrumented appender for Logback.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.codahale.metrics","versions_count":6,"first_release_published_at":"2013-04-22T15:59:50.000Z","latest_release_published_at":"2014-02-17T00:35:00.000Z","latest_release_number":"3.0.2","last_synced_at":"2026-06-06T08:01:08.107Z","created_at":"2022-07-25T17:45:49.560Z","updated_at":"2026-06-06T08:01:08.108Z","registry_url":"https://central.sonatype.com/artifact/com.codahale.metrics/metrics-logback/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.codahale.metrics/metrics-logback/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:52.996Z","dependent_packages_count":29,"downloads":null,"downloads_period":null,"dependent_repos_count":43,"rankings":{"downloads":null,"dependent_repos_count":3.3748725886972903,"dependent_packages_count":2.2570574347123458,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":1.5960205620315318,"average":9.470229310306848},"purl":"pkg:maven/com.codahale.metrics/metrics-logback","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-logback","docker_dependents_count":38,"docker_downloads_count":2258568,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-logback","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.codahale.metrics:metrics-logback/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-logback/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-logback/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-logback/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-logback/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-logback/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-logback/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4790616,"name":"com.yammer.metrics:metrics-annotation","ecosystem":"maven","description":"A dependency-less package of just the annotations used by other Metrics modules.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.yammer.metrics","versions_count":14,"first_release_published_at":"2012-01-08T00:45:27.000Z","latest_release_published_at":"2012-11-26T20:10:44.000Z","latest_release_number":"2.2.0","last_synced_at":"2026-06-06T08:01:00.226Z","created_at":"2022-07-26T12:21:02.881Z","updated_at":"2026-06-06T08:01:00.226Z","registry_url":"https://central.sonatype.com/artifact/com.yammer.metrics/metrics-annotation/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.yammer.metrics/metrics-annotation/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:54.931Z","dependent_packages_count":26,"downloads":null,"downloads_period":null,"dependent_repos_count":104,"rankings":{"downloads":null,"dependent_repos_count":1.910618843455815,"dependent_packages_count":2.502367997885323,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":1.9280408997791203,"average":9.292844741442668},"purl":"pkg:maven/com.yammer.metrics/metrics-annotation","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-annotation","docker_dependents_count":10,"docker_downloads_count":955561,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-annotation","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.yammer.metrics:metrics-annotation/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-annotation/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-annotation/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-annotation/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-annotation/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-annotation/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-annotation/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4790638,"name":"com.yammer.metrics:metrics-scala_2.9.1","ecosystem":"maven","description":"Yammer's Metrics library.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.yammer.metrics","versions_count":14,"first_release_published_at":"2011-12-17T02:08:48.000Z","latest_release_published_at":"2012-11-26T20:16:36.000Z","latest_release_number":"2.2.0","last_synced_at":"2026-06-06T08:01:00.807Z","created_at":"2022-07-26T12:21:12.739Z","updated_at":"2026-06-06T08:01:00.807Z","registry_url":"https://central.sonatype.com/artifact/com.yammer.metrics/metrics-scala_2.9.1/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.yammer.metrics/metrics-scala_2.9.1/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:53.817Z","dependent_packages_count":2,"downloads":null,"downloads_period":null,"dependent_repos_count":10,"rankings":{"downloads":null,"dependent_repos_count":7.806683261008436,"dependent_packages_count":23.153712600151792,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":3.809422729175136,"average":14.978602911285687},"purl":"pkg:maven/com.yammer.metrics/metrics-scala_2.9.1","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-scala_2.9.1","docker_dependents_count":7,"docker_downloads_count":41138,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-scala_2.9.1","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.yammer.metrics:metrics-scala_2.9.1/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-scala_2.9.1/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-scala_2.9.1/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-scala_2.9.1/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-scala_2.9.1/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-scala_2.9.1/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-scala_2.9.1/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4663572,"name":"com.codahale.metrics:metrics-annotation","ecosystem":"maven","description":"A dependency-less package of just the annotations used by other Metrics modules.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.codahale.metrics","versions_count":6,"first_release_published_at":"2013-04-22T15:53:42.000Z","latest_release_published_at":"2014-02-17T00:31:19.000Z","latest_release_number":"3.0.2","last_synced_at":"2026-06-06T08:01:01.295Z","created_at":"2022-07-25T17:45:47.652Z","updated_at":"2026-06-06T08:01:01.295Z","registry_url":"https://central.sonatype.com/artifact/com.codahale.metrics/metrics-annotation/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.codahale.metrics/metrics-annotation/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-02-17T01:35:07.200Z","dependent_packages_count":54,"downloads":null,"downloads_period":null,"dependent_repos_count":69,"rankings":{"downloads":null,"dependent_repos_count":2.4901525331069134,"dependent_packages_count":1.2804210130024611,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":1.6266593507380342,"average":9.104085772588096},"purl":"pkg:maven/com.codahale.metrics/metrics-annotation","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-annotation","docker_dependents_count":32,"docker_downloads_count":2017711,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-annotation","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.codahale.metrics:metrics-annotation/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-annotation/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-annotation/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-annotation/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-annotation/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-annotation/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-annotation/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4663589,"name":"com.codahale.metrics:metrics-graphite","ecosystem":"maven","description":"A reporter for Metrics which announces measurements to a Graphite server.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.codahale.metrics","versions_count":6,"first_release_published_at":"2013-04-22T15:56:22.000Z","latest_release_published_at":"2014-02-17T00:33:02.000Z","latest_release_number":"3.0.2","last_synced_at":"2026-06-06T08:01:02.521Z","created_at":"2022-07-25T17:45:52.777Z","updated_at":"2026-06-06T08:01:02.521Z","registry_url":"https://central.sonatype.com/artifact/com.codahale.metrics/metrics-graphite/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.codahale.metrics/metrics-graphite/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:54.542Z","dependent_packages_count":78,"downloads":null,"downloads_period":null,"dependent_repos_count":1367,"rankings":{"downloads":null,"dependent_repos_count":0.3172015771967311,"dependent_packages_count":0.9237694921770963,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":2.3740054909515447,"average":8.747634505283688},"purl":"pkg:maven/com.codahale.metrics/metrics-graphite","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-graphite","docker_dependents_count":108,"docker_downloads_count":804395,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-graphite","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.codahale.metrics:metrics-graphite/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-graphite/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-graphite/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-graphite/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-graphite/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-graphite/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-graphite/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4553057,"name":"github.com/codahale/Metrics","ecosystem":"go","description":"Package metrics provides minimalist instrumentation for your applications in the form of counters and gauges.","homepage":"https://github.com/codahale/Metrics","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/codahale/Metrics","keywords_array":[],"namespace":"github.com/codahale","versions_count":1,"first_release_published_at":"2016-09-29T22:46:42.000Z","latest_release_published_at":"2016-09-29T22:46:42.000Z","latest_release_number":"v0.0.0-20160929224642-bc2005d86c79","last_synced_at":"2026-06-06T08:01:04.922Z","created_at":"2022-07-08T04:49:01.246Z","updated_at":"2026-06-06T08:01:04.923Z","registry_url":"https://pkg.go.dev/github.com/codahale/Metrics","install_command":"go get github.com/codahale/Metrics","documentation_url":"https://pkg.go.dev/github.com/codahale/Metrics#section-documentation","metadata":{},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":449,"open_issues_count":0,"forks_count":46,"subscribers_count":1,"default_branch":"master","last_synced_at":"2026-05-21T03:56:41.887Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2026-05-19T09:28:54.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33457339,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-24T19:21:36.376Z","status":"online","status_checked_at":"2026-05-25T02:00:05.812Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-05-25T02:05:08.881Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.345852080216646,"dependent_packages_count":6.999148183520997,"stargazers_count":1.6563846394706392,"forks_count":2.0880165470120766,"average":5.02235036255509},"purl":"pkg:golang/github.com/codahale/%21metrics","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/codahale/Metrics","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/codahale/Metrics","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/codahale/Metrics/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcodahale%2FMetrics/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcodahale%2FMetrics/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcodahale%2FMetrics/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcodahale%2FMetrics/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcodahale%2FMetrics/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcodahale%2FMetrics/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2164373,"maintainers_count":0,"namespaces_count":791500,"keywords_count":113139,"github":"golang","metadata":{"funded_packages_count":53899},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-02T05:03:22.111Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":4790622,"name":"com.yammer.metrics:metrics-servlet","ecosystem":"maven","description":"Yammer's Metrics library.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.yammer.metrics","versions_count":15,"first_release_published_at":"2011-12-17T02:08:57.000Z","latest_release_published_at":"2012-11-26T20:13:49.000Z","latest_release_number":"2.2.0","last_synced_at":"2026-06-06T08:01:05.008Z","created_at":"2022-07-26T12:21:04.628Z","updated_at":"2026-06-06T08:01:05.008Z","registry_url":"https://central.sonatype.com/artifact/com.yammer.metrics/metrics-servlet/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.yammer.metrics/metrics-servlet/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:54.534Z","dependent_packages_count":17,"downloads":null,"downloads_period":null,"dependent_repos_count":118,"rankings":{"downloads":null,"dependent_repos_count":1.7193767309413719,"dependent_packages_count":3.7243149827681843,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":1.151657999026768,"average":9.34370913576588},"purl":"pkg:maven/com.yammer.metrics/metrics-servlet","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-servlet","docker_dependents_count":20,"docker_downloads_count":6412303,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-servlet","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.yammer.metrics:metrics-servlet/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-servlet/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-servlet/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-servlet/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-servlet/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-servlet/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-servlet/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4790613,"name":"com.yammer.metrics:metrics-graphite","ecosystem":"maven","description":"Yammer's Metrics library.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.yammer.metrics","versions_count":15,"first_release_published_at":"2011-12-17T02:07:42.000Z","latest_release_published_at":"2012-11-26T20:12:41.000Z","latest_release_number":"2.2.0","last_synced_at":"2026-06-06T08:01:06.134Z","created_at":"2022-07-26T12:21:00.403Z","updated_at":"2026-06-06T08:01:06.135Z","registry_url":"https://central.sonatype.com/artifact/com.yammer.metrics/metrics-graphite/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.yammer.metrics/metrics-graphite/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:54.544Z","dependent_packages_count":20,"downloads":null,"downloads_period":null,"dependent_repos_count":67,"rankings":{"downloads":null,"dependent_repos_count":2.534008054196613,"dependent_packages_count":3.201052532506153,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":1.5777974916243966,"average":9.487210808884047},"purl":"pkg:maven/com.yammer.metrics/metrics-graphite","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-graphite","docker_dependents_count":11,"docker_downloads_count":2386306,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-graphite","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.yammer.metrics:metrics-graphite/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-graphite/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-graphite/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-graphite/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-graphite/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-graphite/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-graphite/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5069068,"name":"com.yammer.metrics:metrics-guice","ecosystem":"maven","description":"Yammer's Metrics library.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.yammer.metrics","versions_count":14,"first_release_published_at":"2011-12-17T02:07:52.000Z","latest_release_published_at":"2012-11-26T20:14:22.000Z","latest_release_number":"2.2.0","last_synced_at":"2026-06-06T08:01:07.879Z","created_at":"2022-07-28T08:31:24.010Z","updated_at":"2026-06-06T08:01:07.879Z","registry_url":"https://central.sonatype.com/artifact/com.yammer.metrics/metrics-guice/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.yammer.metrics/metrics-guice/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:54.046Z","dependent_packages_count":22,"downloads":null,"downloads_period":null,"dependent_repos_count":27,"rankings":{"downloads":null,"dependent_repos_count":4.531136418706081,"dependent_packages_count":2.931711546818272,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":1.9991308997190445,"average":9.917034966267295},"purl":"pkg:maven/com.yammer.metrics/metrics-guice","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-guice","docker_dependents_count":5,"docker_downloads_count":809896,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-guice","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.yammer.metrics:metrics-guice/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-guice/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-guice/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-guice/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-guice/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-guice/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-guice/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4663586,"name":"com.codahale.metrics:metrics-parent","ecosystem":"maven","description":"The Metrics library.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.codahale.metrics","versions_count":6,"first_release_published_at":"2013-04-22T15:53:07.000Z","latest_release_published_at":"2014-02-17T00:31:08.000Z","latest_release_number":"3.0.2","last_synced_at":"2026-06-06T08:01:10.216Z","created_at":"2022-07-25T17:45:51.849Z","updated_at":"2026-06-06T08:01:10.216Z","registry_url":"https://central.sonatype.com/artifact/com.codahale.metrics/metrics-parent/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.codahale.metrics/metrics-parent/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:54.543Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":31.998402898858956,"stargazers_count":12.31653902564792,"forks_count":16.580558303220485,"average":23.218861042168687},"purl":"pkg:maven/com.codahale.metrics/metrics-parent","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-parent","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-parent","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.codahale.metrics:metrics-parent/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-parent/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-parent/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-parent/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-parent/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-parent/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-parent/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4790618,"name":"com.yammer.metrics:metrics-log4j","ecosystem":"maven","description":"Yammer's Metrics library.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.yammer.metrics","versions_count":15,"first_release_published_at":"2011-12-17T02:08:28.000Z","latest_release_published_at":"2012-11-26T20:15:47.000Z","latest_release_number":"2.2.0","last_synced_at":"2026-06-06T08:01:14.277Z","created_at":"2022-07-26T12:21:03.751Z","updated_at":"2026-06-06T08:01:14.277Z","registry_url":"https://central.sonatype.com/artifact/com.yammer.metrics/metrics-log4j/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.yammer.metrics/metrics-log4j/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:54.702Z","dependent_packages_count":2,"downloads":null,"downloads_period":null,"dependent_repos_count":25,"rankings":{"downloads":null,"dependent_repos_count":4.739600334022873,"dependent_packages_count":23.153712600151792,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":1.2832245622958667,"average":13.859946692512722},"purl":"pkg:maven/com.yammer.metrics/metrics-log4j","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-log4j","docker_dependents_count":12,"docker_downloads_count":5602403,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-log4j","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.yammer.metrics:metrics-log4j/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-log4j/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-log4j/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-log4j/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-log4j/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-log4j/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-log4j/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4663605,"name":"com.codahale.metrics:metrics-servlet","ecosystem":"maven","description":"An instrumented filter for servlet environments.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.codahale.metrics","versions_count":6,"first_release_published_at":"2013-04-22T16:00:11.000Z","latest_release_published_at":"2014-02-17T00:35:14.000Z","latest_release_number":"3.0.2","last_synced_at":"2026-06-06T08:00:28.514Z","created_at":"2022-07-25T17:45:59.190Z","updated_at":"2026-06-06T08:00:28.515Z","registry_url":"https://central.sonatype.com/artifact/com.codahale.metrics/metrics-servlet/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.codahale.metrics/metrics-servlet/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-05T12:49:48.904Z","dependent_packages_count":18,"downloads":null,"downloads_period":null,"dependent_repos_count":291,"rankings":{"downloads":null,"dependent_repos_count":0.8931307034705938,"dependent_packages_count":3.5320716026489536,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":0.9734323653745642,"average":9.104366127517437},"purl":"pkg:maven/com.codahale.metrics/metrics-servlet","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-servlet","docker_dependents_count":53,"docker_downloads_count":13484568,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-servlet","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.codahale.metrics:metrics-servlet/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-servlet/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-servlet/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-servlet/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-servlet/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-servlet/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-servlet/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4790611,"name":"com.yammer.metrics:metrics-jersey","ecosystem":"maven","description":"A set of class providing Metrics integration for Jersey, the reference JAX-RS implementation.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.yammer.metrics","versions_count":14,"first_release_published_at":"2012-01-08T00:49:59.000Z","latest_release_published_at":"2012-11-26T20:15:27.000Z","latest_release_number":"2.2.0","last_synced_at":"2026-06-06T08:00:30.159Z","created_at":"2022-07-26T12:20:59.994Z","updated_at":"2026-06-06T08:00:30.160Z","registry_url":"https://central.sonatype.com/artifact/com.yammer.metrics/metrics-jersey/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.yammer.metrics/metrics-jersey/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-08T07:34:46.515Z","dependent_packages_count":6,"downloads":null,"downloads_period":null,"dependent_repos_count":18,"rankings":{"downloads":null,"dependent_repos_count":5.7184395444632905,"dependent_packages_count":9.704085372081055,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":null,"average":13.886430220659355},"purl":"pkg:maven/com.yammer.metrics/metrics-jersey","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-jersey","docker_dependents_count":1,"docker_downloads_count":12,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-jersey","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.yammer.metrics:metrics-jersey/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jersey/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jersey/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jersey/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jersey/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jersey/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jersey/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4663583,"name":"com.codahale.metrics:metrics-ehcache","ecosystem":"maven","description":"An Ehcache wrapper providing Metrics instrumentation of caches.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.codahale.metrics","versions_count":6,"first_release_published_at":"2013-04-22T15:55:34.000Z","latest_release_published_at":"2014-02-17T00:32:32.000Z","latest_release_number":"3.0.2","last_synced_at":"2026-06-06T08:00:30.627Z","created_at":"2022-07-25T17:45:51.351Z","updated_at":"2026-06-06T08:00:30.628Z","registry_url":"https://central.sonatype.com/artifact/com.codahale.metrics/metrics-ehcache/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.codahale.metrics/metrics-ehcache/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:54.540Z","dependent_packages_count":3,"downloads":null,"downloads_period":null,"dependent_repos_count":61,"rankings":{"downloads":null,"dependent_repos_count":2.6926088427949786,"dependent_packages_count":17.560431506286957,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":null,"average":15.094059078793752},"purl":"pkg:maven/com.codahale.metrics/metrics-ehcache","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-ehcache","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-ehcache","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.codahale.metrics:metrics-ehcache/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-ehcache/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-ehcache/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-ehcache/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-ehcache/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-ehcache/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-ehcache/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5059145,"name":"com.yammer.metrics:metrics-logback","ecosystem":"maven","description":"Yammer's Metrics library.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.yammer.metrics","versions_count":15,"first_release_published_at":"2011-12-17T02:08:36.000Z","latest_release_published_at":"2012-11-26T20:16:08.000Z","latest_release_number":"2.2.0","last_synced_at":"2026-06-06T08:00:31.890Z","created_at":"2022-07-28T01:52:41.091Z","updated_at":"2026-06-06T08:00:31.890Z","registry_url":"https://central.sonatype.com/artifact/com.yammer.metrics/metrics-logback/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.yammer.metrics/metrics-logback/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:54.552Z","dependent_packages_count":12,"downloads":null,"downloads_period":null,"dependent_repos_count":11,"rankings":{"downloads":null,"dependent_repos_count":7.423798528937635,"dependent_packages_count":5.159732220991776,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":1.9991308997190445,"average":10.941171523148306},"purl":"pkg:maven/com.yammer.metrics/metrics-logback","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-logback","docker_dependents_count":6,"docker_downloads_count":809908,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-logback","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.yammer.metrics:metrics-logback/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-logback/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-logback/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-logback/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-logback/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-logback/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-logback/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4761531,"name":"com.codahale.metrics:metrics-log4j","ecosystem":"maven","description":"An instrumented appender for Log4j.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.codahale.metrics","versions_count":6,"first_release_published_at":"2013-04-22T15:59:22.000Z","latest_release_published_at":"2014-02-17T00:34:47.000Z","latest_release_number":"3.0.2","last_synced_at":"2026-06-06T08:00:32.150Z","created_at":"2022-07-26T03:47:53.091Z","updated_at":"2026-06-06T08:00:32.150Z","registry_url":"https://central.sonatype.com/artifact/com.codahale.metrics/metrics-log4j/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.codahale.metrics/metrics-log4j/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-11T02:32:38.523Z","dependent_packages_count":8,"downloads":null,"downloads_period":null,"dependent_repos_count":16,"rankings":{"downloads":null,"dependent_repos_count":6.087306530067065,"dependent_packages_count":7.4612459373566935,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":0.990654168176912,"average":10.932480520338748},"purl":"pkg:maven/com.codahale.metrics/metrics-log4j","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-log4j","docker_dependents_count":34,"docker_downloads_count":12330673,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-log4j","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.codahale.metrics:metrics-log4j/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-log4j/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-log4j/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-log4j/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-log4j/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-log4j/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-log4j/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4663584,"name":"com.codahale.metrics:metrics-jetty8","ecosystem":"maven","description":"A set of extensions for Jetty 8 which provide instrumentation of thread pools, connector metrics, and application latency and utilization.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.codahale.metrics","versions_count":6,"first_release_published_at":"2013-04-22T15:58:03.000Z","latest_release_published_at":"2014-02-17T00:34:03.000Z","latest_release_number":"3.0.2","last_synced_at":"2026-06-06T08:00:32.639Z","created_at":"2022-07-25T17:45:51.483Z","updated_at":"2026-06-06T08:00:32.639Z","registry_url":"https://central.sonatype.com/artifact/com.codahale.metrics/metrics-jetty8/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.codahale.metrics/metrics-jetty8/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:52.998Z","dependent_packages_count":9,"downloads":null,"downloads_period":null,"dependent_repos_count":14,"rankings":{"downloads":null,"dependent_repos_count":6.556500529670563,"dependent_packages_count":6.699882050676156,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":4.84293115083696,"average":11.64450193945535},"purl":"pkg:maven/com.codahale.metrics/metrics-jetty8","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-jetty8","docker_dependents_count":1,"docker_downloads_count":198,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-jetty8","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.codahale.metrics:metrics-jetty8/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jetty8/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jetty8/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jetty8/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jetty8/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jetty8/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jetty8/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4790601,"name":"com.yammer.metrics:metrics-servlets","ecosystem":"maven","description":"Yammer's Metrics library.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.yammer.metrics","versions_count":1,"first_release_published_at":"2013-04-01T20:52:46.000Z","latest_release_published_at":"2013-04-01T20:52:46.000Z","latest_release_number":"3.0.0-BETA1","last_synced_at":"2026-06-06T08:00:36.169Z","created_at":"2022-07-26T12:20:57.262Z","updated_at":"2026-06-06T08:00:36.169Z","registry_url":"https://central.sonatype.com/artifact/com.yammer.metrics/metrics-servlets/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.yammer.metrics/metrics-servlets/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:52.989Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":2,"rankings":{"downloads":null,"dependent_repos_count":16.11039576103347,"dependent_packages_count":32.97975236649599,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":null,"average":22.303336023405635},"purl":"pkg:maven/com.yammer.metrics/metrics-servlets","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-servlets","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-servlets","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.yammer.metrics:metrics-servlets/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-servlets/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-servlets/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-servlets/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-servlets/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-servlets/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-servlets/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4790624,"name":"com.yammer.metrics:metrics-web","ecosystem":"maven","description":"Yammer's Metrics library.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.yammer.metrics","versions_count":14,"first_release_published_at":"2011-12-17T02:09:05.000Z","latest_release_published_at":"2012-11-26T20:17:24.000Z","latest_release_number":"2.2.0","last_synced_at":"2026-06-06T08:00:37.047Z","created_at":"2022-07-26T12:21:05.718Z","updated_at":"2026-06-06T08:00:37.047Z","registry_url":"https://central.sonatype.com/artifact/com.yammer.metrics/metrics-web/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.yammer.metrics/metrics-web/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:54.551Z","dependent_packages_count":4,"downloads":null,"downloads_period":null,"dependent_repos_count":43,"rankings":{"downloads":null,"dependent_repos_count":3.3748725886972903,"dependent_packages_count":13.918620974153278,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":1.151657999026768,"average":11.713669505594082},"purl":"pkg:maven/com.yammer.metrics/metrics-web","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-web","docker_dependents_count":17,"docker_downloads_count":6412291,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-web","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.yammer.metrics:metrics-web/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-web/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-web/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-web/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-web/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-web/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-web/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4790637,"name":"com.yammer.metrics:metrics-ganglia","ecosystem":"maven","description":"Yammer's Metrics library.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.yammer.metrics","versions_count":15,"first_release_published_at":"2011-12-17T02:07:33.000Z","latest_release_published_at":"2012-11-26T20:12:09.000Z","latest_release_number":"2.2.0","last_synced_at":"2026-06-06T08:00:44.821Z","created_at":"2022-07-26T12:21:12.209Z","updated_at":"2026-06-06T08:00:44.821Z","registry_url":"https://central.sonatype.com/artifact/com.yammer.metrics/metrics-ganglia/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.yammer.metrics/metrics-ganglia/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:52.976Z","dependent_packages_count":17,"downloads":null,"downloads_period":null,"dependent_repos_count":98,"rankings":{"downloads":null,"dependent_repos_count":1.9728976884736076,"dependent_packages_count":3.7243149827681843,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":2.4242691247118855,"average":9.64893555240935},"purl":"pkg:maven/com.yammer.metrics/metrics-ganglia","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-ganglia","docker_dependents_count":44,"docker_downloads_count":14512191,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-ganglia","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.yammer.metrics:metrics-ganglia/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-ganglia/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-ganglia/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-ganglia/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-ganglia/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-ganglia/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-ganglia/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4663579,"name":"com.codahale.metrics:metrics-httpclient","ecosystem":"maven","description":"An Apache HttpClient wrapper providing Metrics instrumentation of connection pools, request durations and rates, and other useful information.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.codahale.metrics","versions_count":6,"first_release_published_at":"2013-04-22T15:56:49.000Z","latest_release_published_at":"2014-02-17T00:33:17.000Z","latest_release_number":"3.0.2","last_synced_at":"2026-06-06T08:00:47.723Z","created_at":"2022-07-25T17:45:51.045Z","updated_at":"2026-06-06T08:00:47.723Z","registry_url":"https://central.sonatype.com/artifact/com.codahale.metrics/metrics-httpclient/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.codahale.metrics/metrics-httpclient/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:53.068Z","dependent_packages_count":9,"downloads":null,"downloads_period":null,"dependent_repos_count":19,"rankings":{"downloads":null,"dependent_repos_count":5.549225319254176,"dependent_packages_count":6.699681797155198,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":0.9768366752308423,"average":10.669787951546658},"purl":"pkg:maven/com.codahale.metrics/metrics-httpclient","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-httpclient","docker_dependents_count":49,"docker_downloads_count":13288353,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-httpclient","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.codahale.metrics:metrics-httpclient/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-httpclient/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-httpclient/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-httpclient/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-httpclient/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-httpclient/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-httpclient/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4663580,"name":"com.codahale.metrics:metrics-healthchecks","ecosystem":"maven","description":"An addition to Metrics which provides the ability to run application-specific health checks, allowing you to check your application's heath in production.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.codahale.metrics","versions_count":6,"first_release_published_at":"2013-04-22T15:55:11.000Z","latest_release_published_at":"2014-02-17T00:32:18.000Z","latest_release_number":"3.0.2","last_synced_at":"2026-06-06T08:00:55.853Z","created_at":"2022-07-25T17:45:51.061Z","updated_at":"2026-06-06T08:00:55.853Z","registry_url":"https://central.sonatype.com/artifact/com.codahale.metrics/metrics-healthchecks/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.codahale.metrics/metrics-healthchecks/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:53.940Z","dependent_packages_count":82,"downloads":null,"downloads_period":null,"dependent_repos_count":113,"rankings":{"downloads":null,"dependent_repos_count":1.7870624210250177,"dependent_packages_count":0.8805147316502693,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":0.9419925625842316,"average":8.746553136270519},"purl":"pkg:maven/com.codahale.metrics/metrics-healthchecks","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-healthchecks","docker_dependents_count":138,"docker_downloads_count":15265973,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-healthchecks","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.codahale.metrics:metrics-healthchecks/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-healthchecks/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-healthchecks/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-healthchecks/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-healthchecks/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-healthchecks/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-healthchecks/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4663577,"name":"com.codahale.metrics:metrics-json","ecosystem":"maven","description":"A set of Jackson modules which provide serializers for most Metrics classes.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.codahale.metrics","versions_count":6,"first_release_published_at":"2013-04-22T15:58:55.000Z","latest_release_published_at":"2014-02-17T00:34:34.000Z","latest_release_number":"3.0.2","last_synced_at":"2026-06-06T08:00:56.133Z","created_at":"2022-07-25T17:45:50.883Z","updated_at":"2026-06-06T08:00:56.134Z","registry_url":"https://central.sonatype.com/artifact/com.codahale.metrics/metrics-json/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.codahale.metrics/metrics-json/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:54.044Z","dependent_packages_count":52,"downloads":null,"downloads_period":null,"dependent_repos_count":816,"rankings":{"downloads":null,"dependent_repos_count":0.44316104187901884,"dependent_packages_count":1.3282816045113115,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":0.9459976330033824,"average":8.568127249097357},"purl":"pkg:maven/com.codahale.metrics/metrics-json","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-json","docker_dependents_count":96,"docker_downloads_count":14691834,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-json","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.codahale.metrics:metrics-json/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-json/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-json/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-json/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-json/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-json/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-json/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4790600,"name":"com.yammer.metrics:metrics-jetty8","ecosystem":"maven","description":"Yammer's Metrics library.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.yammer.metrics","versions_count":1,"first_release_published_at":"2013-04-01T20:49:21.000Z","latest_release_published_at":"2013-04-01T20:49:21.000Z","latest_release_number":"3.0.0-BETA1","last_synced_at":"2026-06-06T08:00:56.353Z","created_at":"2022-07-26T12:20:56.650Z","updated_at":"2026-06-06T08:00:56.353Z","registry_url":"https://central.sonatype.com/artifact/com.yammer.metrics/metrics-jetty8/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.yammer.metrics/metrics-jetty8/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:54.980Z","dependent_packages_count":2,"downloads":null,"downloads_period":null,"dependent_repos_count":5,"rankings":{"downloads":null,"dependent_repos_count":10.909811821766356,"dependent_packages_count":23.153712600151792,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":null,"average":18.546680097002806},"purl":"pkg:maven/com.yammer.metrics/metrics-jetty8","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-jetty8","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-jetty8","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.yammer.metrics:metrics-jetty8/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jetty8/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jetty8/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jetty8/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jetty8/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jetty8/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jetty8/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4663587,"name":"com.codahale.metrics:metrics-servlets","ecosystem":"maven","description":"A set of utility servlets for Metrics, allowing you to expose valuable information about your production environment.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.codahale.metrics","versions_count":6,"first_release_published_at":"2013-04-22T16:00:34.000Z","latest_release_published_at":"2014-02-17T00:35:30.000Z","latest_release_number":"3.0.2","last_synced_at":"2026-06-06T08:00:57.144Z","created_at":"2022-07-25T17:45:52.411Z","updated_at":"2026-06-06T08:00:57.144Z","registry_url":"https://central.sonatype.com/artifact/com.codahale.metrics/metrics-servlets/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.codahale.metrics/metrics-servlets/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:53.811Z","dependent_packages_count":75,"downloads":null,"downloads_period":null,"dependent_repos_count":668,"rankings":{"downloads":null,"dependent_repos_count":0.5032370981662785,"dependent_packages_count":0.9610166470751972,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":0.9484006752548726,"average":8.507170077317884},"purl":"pkg:maven/com.codahale.metrics/metrics-servlets","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-servlets","docker_dependents_count":89,"docker_downloads_count":14494839,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-servlets","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.codahale.metrics:metrics-servlets/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-servlets/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-servlets/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-servlets/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-servlets/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-servlets/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-servlets/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4790626,"name":"com.yammer.metrics:metrics-ehcache","ecosystem":"maven","description":"Yammer's Metrics library.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.yammer.metrics","versions_count":15,"first_release_published_at":"2011-12-17T02:07:25.000Z","latest_release_published_at":"2012-11-26T20:11:41.000Z","latest_release_number":"2.2.0","last_synced_at":"2026-06-06T08:00:56.764Z","created_at":"2022-07-26T12:21:06.236Z","updated_at":"2026-06-06T08:00:56.765Z","registry_url":"https://central.sonatype.com/artifact/com.yammer.metrics/metrics-ehcache/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.yammer.metrics/metrics-ehcache/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:54.541Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":10,"rankings":{"downloads":null,"dependent_repos_count":7.806683261008436,"dependent_packages_count":32.97975236649599,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":1.5777974916243966,"average":16.497485817044378},"purl":"pkg:maven/com.yammer.metrics/metrics-ehcache","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-ehcache","docker_dependents_count":11,"docker_downloads_count":2386306,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-ehcache","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.yammer.metrics:metrics-ehcache/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-ehcache/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-ehcache/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-ehcache/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-ehcache/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-ehcache/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-ehcache/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4790636,"name":"com.yammer.metrics:metrics-parent","ecosystem":"maven","description":"Yammer's Metrics library.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.yammer.metrics","versions_count":15,"first_release_published_at":"2011-12-17T02:06:53.000Z","latest_release_published_at":"2012-11-26T20:10:04.000Z","latest_release_number":"2.2.0","last_synced_at":"2026-06-06T08:00:57.803Z","created_at":"2022-07-26T12:21:11.434Z","updated_at":"2026-06-06T08:00:57.803Z","registry_url":"https://central.sonatype.com/artifact/com.yammer.metrics/metrics-parent/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.yammer.metrics/metrics-parent/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:53.769Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":48.85985838769028,"stargazers_count":12.31653902564792,"forks_count":16.580558303220485,"average":27.434224914376518},"purl":"pkg:maven/com.yammer.metrics/metrics-parent","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-parent","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-parent","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.yammer.metrics:metrics-parent/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-parent/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-parent/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-parent/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-parent/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-parent/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-parent/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4790609,"name":"com.yammer.metrics:metrics-json","ecosystem":"maven","description":"Yammer's Metrics library.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.yammer.metrics","versions_count":1,"first_release_published_at":"2013-04-01T20:50:05.000Z","latest_release_published_at":"2013-04-01T20:50:05.000Z","latest_release_number":"3.0.0-BETA1","last_synced_at":"2026-06-06T08:00:58.797Z","created_at":"2022-07-26T12:20:59.316Z","updated_at":"2026-06-06T08:00:58.797Z","registry_url":"https://central.sonatype.com/artifact/com.yammer.metrics/metrics-json/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.yammer.metrics/metrics-json/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:54.462Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":1,"rankings":{"downloads":null,"dependent_repos_count":20.767691897942793,"dependent_packages_count":32.97975236649599,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":null,"average":23.467660057632962},"purl":"pkg:maven/com.yammer.metrics/metrics-json","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-json","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-json","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.yammer.metrics:metrics-json/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-json/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-json/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-json/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-json/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-json/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-json/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5030708,"name":"com.yammer.metrics:metrics-jetty","ecosystem":"maven","description":"Yammer's Metrics library.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.yammer.metrics","versions_count":14,"first_release_published_at":"2011-12-17T02:08:20.000Z","latest_release_published_at":"2012-11-26T20:13:21.000Z","latest_release_number":"2.2.0","last_synced_at":"2026-06-06T08:01:10.296Z","created_at":"2022-07-27T15:59:03.012Z","updated_at":"2026-06-06T08:01:10.311Z","registry_url":"https://central.sonatype.com/artifact/com.yammer.metrics/metrics-jetty/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.yammer.metrics/metrics-jetty/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:53.709Z","dependent_packages_count":9,"downloads":null,"downloads_period":null,"dependent_repos_count":14,"rankings":{"downloads":null,"dependent_repos_count":6.556500529670563,"dependent_packages_count":6.699681797155198,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":1.518121942379052,"average":10.979500047059577},"purl":"pkg:maven/com.yammer.metrics/metrics-jetty","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-jetty","docker_dependents_count":17,"docker_downloads_count":3196214,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-jetty","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.yammer.metrics:metrics-jetty/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jetty/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jetty/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jetty/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jetty/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jetty/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jetty/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4663582,"name":"com.codahale.metrics:metrics-jersey","ecosystem":"maven","description":"A set of class providing Metrics integration for Jersey, the reference JAX-RS implementation.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.codahale.metrics","versions_count":6,"first_release_published_at":"2013-04-22T15:57:38.000Z","latest_release_published_at":"2014-02-17T00:33:47.000Z","latest_release_number":"3.0.2","last_synced_at":"2026-06-06T08:01:10.513Z","created_at":"2022-07-25T17:45:51.309Z","updated_at":"2026-06-06T08:01:10.514Z","registry_url":"https://central.sonatype.com/artifact/com.codahale.metrics/metrics-jersey/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.codahale.metrics/metrics-jersey/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:54.543Z","dependent_packages_count":26,"downloads":null,"downloads_period":null,"dependent_repos_count":23,"rankings":{"downloads":null,"dependent_repos_count":4.979504052129997,"dependent_packages_count":2.502367997885323,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":2.000132167323832,"average":9.921040036686446},"purl":"pkg:maven/com.codahale.metrics/metrics-jersey","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-jersey","docker_dependents_count":5,"docker_downloads_count":809087,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-jersey","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.codahale.metrics:metrics-jersey/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jersey/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jersey/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jersey/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jersey/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jersey/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jersey/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5030707,"name":"com.yammer.metrics:metrics-jdbi","ecosystem":"maven","description":"Yammer's Metrics library.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.yammer.metrics","versions_count":15,"first_release_published_at":"2011-12-17T02:08:10.000Z","latest_release_published_at":"2012-11-26T20:15:07.000Z","latest_release_number":"2.2.0","last_synced_at":"2026-06-06T08:01:10.961Z","created_at":"2022-07-27T15:58:59.486Z","updated_at":"2026-06-06T08:01:10.962Z","registry_url":"https://central.sonatype.com/artifact/com.yammer.metrics/metrics-jdbi/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.yammer.metrics/metrics-jdbi/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:54.897Z","dependent_packages_count":7,"downloads":null,"downloads_period":null,"dependent_repos_count":4,"rankings":{"downloads":null,"dependent_repos_count":12.117941313703149,"dependent_packages_count":8.394227091497836,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":null,"average":15.158841092823515},"purl":"pkg:maven/com.yammer.metrics/metrics-jdbi","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-jdbi","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-jdbi","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.yammer.metrics:metrics-jdbi/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jdbi/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jdbi/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jdbi/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jdbi/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jdbi/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-jdbi/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4663588,"name":"com.codahale.metrics:metrics-ganglia","ecosystem":"maven","description":"A reporter for Metrics which announces measurements to a Ganglia cluster.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.codahale.metrics","versions_count":6,"first_release_published_at":"2013-04-22T15:55:58.000Z","latest_release_published_at":"2014-02-17T00:32:47.000Z","latest_release_number":"3.0.2","last_synced_at":"2026-06-06T08:01:10.979Z","created_at":"2022-07-25T17:45:52.594Z","updated_at":"2026-06-06T08:01:10.981Z","registry_url":"https://central.sonatype.com/artifact/com.codahale.metrics/metrics-ganglia/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.codahale.metrics/metrics-ganglia/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:52.979Z","dependent_packages_count":33,"downloads":null,"downloads_period":null,"dependent_repos_count":148,"rankings":{"downloads":null,"dependent_repos_count":1.4540408156726417,"dependent_packages_count":1.9835111250843567,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":3.5324721096908687,"average":9.418644003308188},"purl":"pkg:maven/com.codahale.metrics/metrics-ganglia","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-ganglia","docker_dependents_count":47,"docker_downloads_count":7499,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-ganglia","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.codahale.metrics:metrics-ganglia/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-ganglia/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-ganglia/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-ganglia/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-ganglia/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-ganglia/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-ganglia/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4790602,"name":"com.yammer.metrics:metrics-httpclient","ecosystem":"maven","description":"Yammer's Metrics library.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.yammer.metrics","versions_count":15,"first_release_published_at":"2011-12-17T02:08:02.000Z","latest_release_published_at":"2012-11-26T20:14:46.000Z","latest_release_number":"2.2.0","last_synced_at":"2026-06-06T08:01:12.340Z","created_at":"2022-07-26T12:20:57.284Z","updated_at":"2026-06-06T08:01:12.341Z","registry_url":"https://central.sonatype.com/artifact/com.yammer.metrics/metrics-httpclient/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.yammer.metrics/metrics-httpclient/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:54.981Z","dependent_packages_count":4,"downloads":null,"downloads_period":null,"dependent_repos_count":5,"rankings":{"downloads":null,"dependent_repos_count":10.909811821766356,"dependent_packages_count":13.918620974153278,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":1.9991308997190445,"average":13.39015193234635},"purl":"pkg:maven/com.yammer.metrics/metrics-httpclient","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-httpclient","docker_dependents_count":5,"docker_downloads_count":809896,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-httpclient","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.yammer.metrics:metrics-httpclient/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-httpclient/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-httpclient/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-httpclient/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-httpclient/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-httpclient/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-httpclient/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4790614,"name":"com.yammer.metrics:metrics-core","ecosystem":"maven","description":"Yammer's Metrics library.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.yammer.metrics","versions_count":15,"first_release_published_at":"2011-12-17T02:07:05.000Z","latest_release_published_at":"2012-11-26T20:11:09.000Z","latest_release_number":"2.2.0","last_synced_at":"2026-06-06T08:01:12.836Z","created_at":"2022-07-26T12:21:02.553Z","updated_at":"2026-06-06T08:01:12.837Z","registry_url":"https://central.sonatype.com/artifact/com.yammer.metrics/metrics-core/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.yammer.metrics/metrics-core/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:53.773Z","dependent_packages_count":408,"downloads":null,"downloads_period":null,"dependent_repos_count":4441,"rankings":{"downloads":null,"dependent_repos_count":0.14197974635889035,"dependent_packages_count":0.19845123926891445,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":0.09351839428716754,"average":8.111429069201609},"purl":"pkg:maven/com.yammer.metrics/metrics-core","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-core","docker_dependents_count":2011,"docker_downloads_count":1358427337,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-core","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.yammer.metrics:metrics-core/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-core/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-core/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-core/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-core/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-core/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-core/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":3500836,"name":"github.com/codahale/metrics","ecosystem":"go","description":"Package metrics provides minimalist instrumentation for your applications in\nthe form of counters and gauges.\n\nA counter is a monotonically-increasing, unsigned, 64-bit integer used to\nrepresent the number of times an event has occurred. By tracking the deltas\nbetween measurements of a counter over intervals of time, an aggregation\nlayer can derive rates, acceleration, etc.\n\nA gauge returns instantaneous measurements of something using signed, 64-bit\nintegers. This value does not need to be monotonic.\n\nA histogram tracks the distribution of a stream of values (e.g. the number of\nmilliseconds it takes to handle requests), adding gauges for the values at\nmeaningful quantiles: 50th, 75th, 90th, 95th, 99th, 99.9th.\n\nMeasurements from counters and gauges are available as expvars. Your service\nshould return its expvars from an HTTP endpoint (i.e., /debug/vars) as a JSON\nobject.","homepage":"https://github.com/codahale/metrics","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"github.com/codahale","versions_count":1,"first_release_published_at":"2016-09-29T22:46:42.000Z","latest_release_published_at":"2016-09-29T22:46:42.000Z","latest_release_number":"v0.0.0-20160929224642-bc2005d86c79","last_synced_at":"2026-06-06T08:01:13.721Z","created_at":"2022-04-10T20:08:40.902Z","updated_at":"2026-06-06T08:01:13.722Z","registry_url":"https://pkg.go.dev/github.com/codahale/metrics","install_command":"go get github.com/codahale/metrics","documentation_url":"https://pkg.go.dev/github.com/codahale/metrics#section-documentation","metadata":{},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:54.045Z","dependent_packages_count":3,"downloads":null,"downloads_period":null,"dependent_repos_count":14,"rankings":{"downloads":null,"dependent_repos_count":1.4365747266908264,"dependent_packages_count":3.3775775533651813,"stargazers_count":2.6953699784322027,"forks_count":3.450118681017289,"docker_downloads_count":null,"average":2.739910234876375},"purl":"pkg:golang/github.com/codahale/metrics","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/codahale/metrics","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/codahale/metrics","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/codahale/metrics/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcodahale%2Fmetrics/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcodahale%2Fmetrics/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcodahale%2Fmetrics/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcodahale%2Fmetrics/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcodahale%2Fmetrics/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcodahale%2Fmetrics/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2164373,"maintainers_count":0,"namespaces_count":791500,"keywords_count":113139,"github":"golang","metadata":{"funded_packages_count":53899},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-02T05:03:22.111Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":4790617,"name":"com.yammer.metrics:metrics-spring","ecosystem":"maven","description":"Yammer's Metrics library.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.yammer.metrics","versions_count":12,"first_release_published_at":"2012-01-19T19:11:37.000Z","latest_release_published_at":"2012-11-26T20:16:57.000Z","latest_release_number":"2.2.0","last_synced_at":"2026-06-06T08:01:14.103Z","created_at":"2022-07-26T12:21:03.033Z","updated_at":"2026-06-06T08:01:14.103Z","registry_url":"https://central.sonatype.com/artifact/com.yammer.metrics/metrics-spring/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.yammer.metrics/metrics-spring/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:53.818Z","dependent_packages_count":4,"downloads":null,"downloads_period":null,"dependent_repos_count":32,"rankings":{"downloads":null,"dependent_repos_count":4.069351799378013,"dependent_packages_count":13.918620974153278,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":null,"average":14.527792184906092},"purl":"pkg:maven/com.yammer.metrics/metrics-spring","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-spring","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.yammer.metrics:metrics-spring","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.yammer.metrics:metrics-spring/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-spring/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-spring/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-spring/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-spring/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-spring/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.yammer.metrics:metrics-spring/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4663581,"name":"com.codahale.metrics:metrics-jetty9","ecosystem":"maven","description":"A set of extensions for Jetty 9 which provide instrumentation of thread pools, connector metrics, and application latency and utilization.","homepage":"http://metrics.codahale.com/","licenses":"Apache License 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/codahale/metrics","keywords_array":[],"namespace":"com.codahale.metrics","versions_count":6,"first_release_published_at":"2013-04-22T15:58:30.000Z","latest_release_published_at":"2014-02-17T00:34:19.000Z","latest_release_number":"3.0.2","last_synced_at":"2026-06-06T08:01:14.530Z","created_at":"2022-07-25T17:45:51.161Z","updated_at":"2026-06-06T08:01:14.530Z","registry_url":"https://central.sonatype.com/artifact/com.codahale.metrics/metrics-jetty9/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.codahale.metrics/metrics-jetty9/","metadata":{"distribution_repositories":["http://oss.sonatype.org/service/local/staging/deploy/maven2/","http://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":19995119,"uuid":"23262449","full_name":"codahale/metrics","owner":"codahale","description":"This is not the Java library.","archived":true,"fork":false,"pushed_at":"2016-09-29T22:46:42.000Z","size":43,"stargazers_count":447,"open_issues_count":0,"forks_count":47,"subscribers_count":27,"default_branch":"master","last_synced_at":"2025-08-17T18:52:56.929Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://github.com/dropwizard/metrics","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codahale.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-08-23T17:55:21.000Z","updated_at":"2025-03-04T10:45:03.000Z","dependencies_parsed_at":"2022-07-22T03:46:55.949Z","dependency_job_id":null,"html_url":"https://github.com/codahale/metrics","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/codahale/metrics","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","download_url":"https://codeload.github.com/codahale/metrics/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/sbom","scorecard":{"id":295427,"data":{"date":"2025-08-11","repo":{"name":"github.com/codahale/metrics","commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":3,"reason":"Found 9/26 approved changesets -- score normalized to 3","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:22:46.926Z","repository_id":19995119,"created_at":"2025-08-17T19:22:46.926Z","updated_at":"2025-08-17T19:22:46.926Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278519557,"owners_count":26000309,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-05T02:00:06.059Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"codahale","name":"Coda Hale","uuid":"207","kind":"user","description":"A real person.","email":"","website":"https://codahale.com","location":"Fort Collins, CO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/207?u=bca8f37568423d246fcbec047a92ec4b89280b51\u0026v=4","repositories_count":116,"last_synced_at":"2023-04-10T21:25:44.623Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/codahale","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:59:22.612Z","updated_at":"2023-04-10T21:25:44.799Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codahale/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-05T21:48:54.541Z","dependent_packages_count":26,"downloads":null,"downloads_period":null,"dependent_repos_count":24,"rankings":{"downloads":null,"dependent_repos_count":4.857549657866859,"dependent_packages_count":2.502367997885323,"stargazers_count":16.358910380541765,"forks_count":23.76428558555131,"docker_downloads_count":1.5914147310495088,"average":9.814905670578954},"purl":"pkg:maven/com.codahale.metrics/metrics-jetty9","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-jetty9","docker_dependents_count":21,"docker_downloads_count":2232909,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.codahale.metrics:metrics-jetty9","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.codahale.metrics:metrics-jetty9/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-17T18:53:00.896Z","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jetty9/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jetty9/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jetty9/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jetty9/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jetty9/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.codahale.metrics:metrics-jetty9/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608285,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}}],"commits":{"id":11464421,"full_name":"codahale/metrics","default_branch":"master","total_commits":34,"total_committers":10,"total_bot_commits":0,"total_bot_committers":0,"mean_commits":3.4,"dds":0.3529411764705882,"past_year_total_commits":0,"past_year_total_committers":0,"past_year_total_bot_commits":0,"past_year_total_bot_committers":0,"past_year_mean_commits":0.0,"past_year_dds":0.0,"last_synced_at":"2026-06-06T08:00:58.637Z","last_synced_commit":"bc2005d86c7922adc3dd228f42f16015d8132ac8","created_at":"2025-10-05T21:48:52.752Z","updated_at":"2026-06-06T08:00:58.527Z","committers":[{"name":"Coda Hale","email":"coda.hale@gmail.com","login":"codahale","count":22},{"name":"Aldrin Leal","email":"aldrin@leal.eng.br","login":"aldrinleal","count":4},{"name":"taylorchu","email":"tailinchu@gmail.com","login":"taylorchu","count":1},{"name":"Ken Sedgwick","email":"ken@bonsai.com","login":"ksedgwic","count":1},{"name":"Keith Rarick","email":"kr@xph.us","login":"kr","count":1},{"name":"Jack Flintermann","email":"jack@stripe.com","login":"jack-stripe","count":1},{"name":"Henry","email":"cryptix@riseup.net","login":"cryptix","count":1},{"name":"Collin Van Dyck","email":"collinvandyck@gmail.com","login":"collinvandyck","count":1},{"name":"Andrew Metcalf","email":"andrew@stripe.com","login":"andrew-stripe","count":1},{"name":"Adrian Cockcroft","email":"adrian.cockcroft@gmail.com","login":"adrianco","count":1}],"past_year_committers":[],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-06-08T00:00:07.762Z","repositories_count":6253841,"commits_count":883884466,"contributors_count":35050244,"owners_count":1163421,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"codahale/metrics","html_url":"https://github.com/codahale/metrics","last_synced_at":"2025-08-17T18:53:00.896Z","status":"error","issues_count":6,"pull_requests_count":10,"avg_time_to_close_issue":2492712.5,"avg_time_to_close_pull_request":18889.4,"issues_closed_count":6,"pull_requests_closed_count":10,"pull_request_authors_count":10,"issue_authors_count":6,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":1.2,"merged_pull_requests_count":9,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"created_at":"2023-05-15T10:01:07.525Z","updated_at":"2025-08-17T18:53:00.896Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/codahale%2Fmetrics/issues","issue_labels_count":{"table":{}},"pull_request_labels_count":{"table":{}},"issue_author_associations_count":{"table":{"NONE":5,"CONTRIBUTOR":1}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":9,"NONE":1}},"issue_authors":{"table":{"ksedgwic":1,"tbrizard":1,"YossiShasha":1,"AlekSi":1,"xiang90":1,"ryantenney":1}},"pull_request_authors":{"table":{"adrianco":1,"cryptix":1,"jflinter":1,"aldrinleal":1,"taylorchu":1,"collinvandyck":1,"ksedgwic":1,"kr":1,"korbjt":1,"metcalf":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-06-08T00:00:18.161Z","repositories_count":14785760,"issues_count":33505987,"pull_requests_count":110239587,"authors_count":11295740,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{}},"past_year_pull_request_labels_count":{"table":{}},"past_year_issue_author_associations_count":{"table":{}},"past_year_pull_request_author_associations_count":{"table":{}},"past_year_issue_authors":{"table":{}},"past_year_pull_request_authors":{"table":{}},"maintainers":[],"active_maintainers":[]}},"events":{"total":{"WatchEvent":3},"last_year":{"WatchEvent":2}},"keywords":[],"dependencies":[],"score":29.580198695645073,"created_at":"2025-10-10T12:19:14.294Z","updated_at":"2026-06-19T14:02:08.023Z","avatar_url":"https://github.com/codahale.png","language":"Go","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/368338","html_url":"https://summary.ecosyste.ms/projects/368338"}