{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T15:14:15.169781Z","repo":{"ref":{"host":"github.com","owner":"Blankj","name":"AndroidUtilCode"},"default_branch":"master","clone_url":"https://github.com/Blankj/AndroidUtilCode.git","html_url":"https://github.com/Blankj/AndroidUtilCode","description":":fire: Android developers should collect the following utils(updating).","stars":33602,"forks":10557,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":47329,"primary_language":"Java","license_spdx":"Apache-2.0","created_at":"2016-07-30T18:18:32Z","pushed_at":"2024-08-15T10:38:10Z","security_policy_url":null,"distribution":{"owner_created_at":"2016-03-21T08:26:59Z","owner_type":"User","release_assets":[{"name":"util_1_30_0_release.apk","size":6467162,"download_count":1011,"release_tag":"1.30.0","url":"https://github.com/Blankj/AndroidUtilCode/releases/download/1.30.0/util_1_30_0_release.apk"},{"name":"util_1_30_5_release.apk","size":6470826,"download_count":1391,"release_tag":"1.30.0","url":"https://github.com/Blankj/AndroidUtilCode/releases/download/1.30.0/util_1_30_5_release.apk"},{"name":"util_1_29_0_release.apk","size":6442478,"download_count":386,"release_tag":"1.29.0","url":"https://github.com/Blankj/AndroidUtilCode/releases/download/1.29.0/util_1_29_0_release.apk"},{"name":"util_1_28_0_release.apk","size":6495408,"download_count":187,"release_tag":"1.28.0","url":"https://github.com/Blankj/AndroidUtilCode/releases/download/1.28.0/util_1_28_0_release.apk"},{"name":"util_1_27_0_release.apk","size":4938817,"download_count":112,"release_tag":"1.27.0","url":"https://github.com/Blankj/AndroidUtilCode/releases/download/1.27.0/util_1_27_0_release.apk"},{"name":"util_1_26_0_release.apk","size":6429489,"download_count":1380,"release_tag":"1.26.0","url":"https://github.com/Blankj/AndroidUtilCode/releases/download/1.26.0/util_1_26_0_release.apk"},{"name":"util_1_25_9_release.apk","size":6409131,"download_count":231,"release_tag":"1.25.9","url":"https://github.com/Blankj/AndroidUtilCode/releases/download/1.25.9/util_1_25_9_release.apk"},{"name":"util_1_25_7_release.apk","size":6408073,"download_count":94,"release_tag":"1.25.7","url":"https://github.com/Blankj/AndroidUtilCode/releases/download/1.25.7/util_1_25_7_release.apk"},{"name":"util_1_25_3_release.apk","size":7856858,"download_count":86,"release_tag":"1.25.3","url":"https://github.com/Blankj/AndroidUtilCode/releases/download/1.25.3/util_1_25_3_release.apk"},{"name":"util_1_25_2_release.apk","size":7857318,"download_count":72,"release_tag":"1.25.2","url":"https://github.com/Blankj/AndroidUtilCode/releases/download/1.25.2/util_1_25_2_release.apk"}]}},"commit_sha":"7b4caf9e5440046b3fefb63b6b6e2ead7ebaf809","profile":{"lines_by_language":{"Java":64250,"Kotlin":6832,"Shell":63},"files_by_category":{"source":299,"config":191,"other":74,"test":59,"binary":47,"docs":32,"oversized":2},"source_lines":63440,"test_lines":7705},"pillars":{"ai_provenance":{"score":0.0,"confidence":0.65,"coverage":1.0,"label":"none-detected","breakdown":{"attributed_share":0.0,"suspected_share":0.0,"estimated_share":0.0,"ai_artifacts":0.0,"flagged_work_units":0.0,"flagged_releases":0.0,"style_index":0.0},"summary":"No AI attribution or AI-consistent velocity signals detected."},"quality":{"score":64.4,"confidence":0.9,"coverage":1.0,"label":"weak","breakdown":{"complexity":84.2,"duplication":41.9,"lint":98.4,"testing":51.1,"docs":85.0,"type_safety":null,"process":20.0},"summary":"Code quality is weak: test-to-source ratio 0.12, no CI test run detected; 6% of function code in complex or long functions; 15% duplicated lines. Weakest area: process."},"security":{"score":62.2,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":76.6,"sast":93.9,"dependencies":null,"ci_actions":63.1,"posture":0.0,"scorecard":23.8},"summary":"Security posture is weak: 1 high-severity SAST findings; 2 high-severity workflow issues. Weakest area: posture."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"ok","tool_version":"scorecard v5.6.0","metrics":{"aggregate":2.8,"check:Dangerous-Workflow":10.0,"check:Maintained":0.0,"check:Code-Review":4.0,"check:Token-Permissions":0.0,"check:Binary-Artifacts":9.0,"check:Pinned-Dependencies":0.0,"check:CII-Best-Practices":0.0,"check:Security-Policy":0.0,"check:Fuzzing":0.0,"check:License":10.0,"check:Branch-Protection":0.0,"check:Signed-Releases":0.0,"check:SAST":0.0},"findings":[],"evidence":[{"kind":"scorecard-check","description":"Scorecard Dangerous-Workflow: 10/10 (no dangerous workflow patterns detected)","ref":"Dangerous-Workflow","url":"https://scorecard.dev/viewer/?uri=github.com/Blankj/AndroidUtilCode","weight":0.0},{"kind":"scorecard-check","description":"Scorecard Maintained: 0/10 (0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0)","ref":"Maintained","url":"https://scorecard.dev/viewer/?uri=github.com/Blankj/AndroidUtilCode","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Code-Review: 4/10 (Found 9/19 approved changesets -- score normalized to 4)","ref":"Code-Review","url":"https://scorecard.dev/viewer/?uri=github.com/Blankj/AndroidUtilCode","weight":0.6},{"kind":"scorecard-check","description":"Scorecard Token-Permissions: 0/10 (detected GitHub workflow tokens with excessive permissions)","ref":"Token-Permissions","url":"https://scorecard.dev/viewer/?uri=github.com/Blankj/AndroidUtilCode","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Binary-Artifacts: 9/10 (binaries present in source code)","ref":"Binary-Artifacts","url":"https://scorecard.dev/viewer/?uri=github.com/Blankj/AndroidUtilCode","weight":0.1},{"kind":"scorecard-check","description":"Scorecard Pinned-Dependencies: 0/10 (dependency not pinned by hash detected -- score normalized to 0)","ref":"Pinned-Dependencies","url":"https://scorecard.dev/viewer/?uri=github.com/Blankj/AndroidUtilCode","weight":1.0},{"kind":"scorecard-check","description":"Scorecard CII-Best-Practices: 0/10 (no effort to earn an OpenSSF best practices badge detected)","ref":"CII-Best-Practices","url":"https://scorecard.dev/viewer/?uri=github.com/Blankj/AndroidUtilCode","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Security-Policy: 0/10 (security policy file not detected)","ref":"Security-Policy","url":"https://scorecard.dev/viewer/?uri=github.com/Blankj/AndroidUtilCode","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Fuzzing: 0/10 (project is not fuzzed)","ref":"Fuzzing","url":"https://scorecard.dev/viewer/?uri=github.com/Blankj/AndroidUtilCode","weight":1.0},{"kind":"scorecard-check","description":"Scorecard License: 10/10 (license file detected)","ref":"License","url":"https://scorecard.dev/viewer/?uri=github.com/Blankj/AndroidUtilCode","weight":0.0},{"kind":"scorecard-check","description":"Scorecard Branch-Protection: 0/10 (branch protection not enabled on development/release branches)","ref":"Branch-Protection","url":"https://scorecard.dev/viewer/?uri=github.com/Blankj/AndroidUtilCode","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Signed-Releases: 0/10 (Project has not signed or included provenance with any releases.)","ref":"Signed-Releases","url":"https://scorecard.dev/viewer/?uri=github.com/Blankj/AndroidUtilCode","weight":1.0},{"kind":"scorecard-check","description":"Scorecard SAST: 0/10 (SAST tool is not run on all commits -- score normalized to 0)","ref":"SAST","url":"https://scorecard.dev/viewer/?uri=github.com/Blankj/AndroidUtilCode","weight":1.0}],"data":{"date":"2026-11-09","commit":"7b4caf9e5440046b3fefb63b6b6e2ead7ebaf809","matches_head":true},"error":null},{"analyzer":"sec-registry","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no registry dependencies declared"},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":1273.0,"attributed_commits":0.0,"attributed_commit_share":0.0,"effective_loc":229512.0,"attributed_loc":0.0,"attributed_loc_share":0.0,"tools_detected":0.0},"findings":[],"evidence":[],"data":{"attributed_loc_by_commit":{},"tools":{},"monthly":{"2016-07":{"loc":0,"attributed_loc":0},"2016-08":{"loc":13208,"attributed_loc":0},"2016-09":{"loc":6257,"attributed_loc":0},"2016-10":{"loc":5168,"attributed_loc":0},"2016-11":{"loc":1997,"attributed_loc":0},"2016-12":{"loc":3117,"attributed_loc":0},"2017-01":{"loc":566,"attributed_loc":0},"2017-02":{"loc":1949,"attributed_loc":0},"2017-03":{"loc":1985,"attributed_loc":0},"2017-04":{"loc":2489,"attributed_loc":0},"2017-05":{"loc":7079,"attributed_loc":0},"2017-06":{"loc":16712,"attributed_loc":0},"2017-07":{"loc":2666,"attributed_loc":0},"2017-08":{"loc":2624,"attributed_loc":0},"2017-09":{"loc":6046,"attributed_loc":0},"2017-10":{"loc":294,"attributed_loc":0},"2017-11":{"loc":1552,"attributed_loc":0},"2017-12":{"loc":4227,"attributed_loc":0},"2018-01":{"loc":4328,"attributed_loc":0},"2018-02":{"loc":4039,"attributed_loc":0},"2018-03":{"loc":2343,"attributed_loc":0},"2018-04":{"loc":3657,"attributed_loc":0},"2018-05":{"loc":3693,"attributed_loc":0},"2018-06":{"loc":2970,"attributed_loc":0},"2018-07":{"loc":1389,"attributed_loc":0},"2018-08":{"loc":1471,"attributed_loc":0},"2018-09":{"loc":1511,"attributed_loc":0},"2018-10":{"loc":31275,"attributed_loc":0},"2018-11":{"loc":7736,"attributed_loc":0},"2018-12":{"loc":3235,"attributed_loc":0},"2019-01":{"loc":12999,"attributed_loc":0},"2019-02":{"loc":3515,"attributed_loc":0},"2019-03":{"loc":3529,"attributed_loc":0},"2019-04":{"loc":363,"attributed_loc":0},"2019-05":{"loc":1510,"attributed_loc":0},"2019-06":{"loc":23520,"attributed_loc":0},"2019-07":{"loc":4892,"attributed_loc":0},"2019-08":{"loc":6420,"attributed_loc":0},"2019-09":{"loc":6100,"attributed_loc":0},"2019-11":{"loc":8205,"attributed_loc":0},"2019-12":{"loc":532,"attributed_loc":0},"2020-01":{"loc":198,"attributed_loc":0},"2020-03":{"loc":3973,"attributed_loc":0},"2020-04":{"loc":1492,"attributed_loc":0},"2020-05":{"loc":826,"attributed_loc":0},"2020-08":{"loc":19,"attributed_loc":0},"2020-09":{"loc":966,"attributed_loc":0},"2020-10":{"loc":2443,"attributed_loc":0},"2020-11":{"loc":375,"attributed_loc":0},"2020-12":{"loc":1,"attributed_loc":0},"2021-01":{"loc":68,"attributed_loc":0},"2021-02":{"loc":976,"attributed_loc":0},"2021-04":{"loc":5,"attributed_loc":0},"2021-05":{"loc":174,"attributed_loc":0},"2021-09":{"loc":13,"attributed_loc":0},"2021-11":{"loc":23,"attributed_loc":0},"2021-12":{"loc":151,"attributed_loc":0},"2022-05":{"loc":0,"attributed_loc":0},"2022-06":{"loc":11,"attributed_loc":0},"2022-07":{"loc":452,"attributed_loc":0},"2022-10":{"loc":76,"attributed_loc":0},"2024-04":{"loc":102,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-5","metrics":{"work_units":732.0,"flagged_units":0.0,"pre_ai_era_bursts":7.0,"pre_ai_era_measured_loc":152797.0,"pre_ai_era_burst_loc":17641.0,"measured_loc":153625.0,"flagged_loc":0.0,"flagged_loc_share":0.0,"max_loc_per_hour":1039.5,"median_loc_per_hour":80.1704105344694,"pr_timed_units":0.0,"excluded_import_loc":75887.0},"findings":[],"evidence":[],"data":{"flagged_loc_by_commit":{},"excluded_import_commits":["1c36d1eddff8a16a060301a8ee9cd0781015f02a","2ca2c828317dfadc6aea8ff03fc05bc8453194bb","408303ffcdfd2a6f5090c749c6a02f343385f119","7060007c4b80b1286a62340d96f3e38fb506eb09","a99a347fec817b1d9345e75de2a478244a81cc20"]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-5","metrics":{"releases":99.0,"flagged_releases":0.0,"max_loc_per_day":1587.8},"findings":[],"evidence":[],"data":{"releases":[{"from":"1.5.0","to":"1.6.2","loc":4490,"days":19.0,"loc_per_day":236.3,"flagged":false},{"from":"1.6.2","to":"1.7.1","loc":3161,"days":20.96,"loc_per_day":150.8,"flagged":false},{"from":"1.7.1","to":"1.8.0","loc":3887,"days":45.14,"loc_per_day":86.1,"flagged":false},{"from":"1.8.0","to":"1.8.1","loc":16,"days":0.93,"loc_per_day":17.1,"flagged":false},{"from":"1.8.1","to":"1.8.2","loc":1691,"days":9.03,"loc_per_day":187.2,"flagged":false},{"from":"1.8.2","to":"1.8.4","loc":513,"days":17.0,"loc_per_day":30.2,"flagged":false},{"from":"1.8.4","to":"1.8.5","loc":57,"days":1.88,"loc_per_day":30.3,"flagged":false},{"from":"1.8.5","to":"1.8.6","loc":165,"days":3.09,"loc_per_day":53.4,"flagged":false},{"from":"1.8.6","to":"1.9.0","loc":260,"days":3.03,"loc_per_day":85.9,"flagged":false},{"from":"1.9.0","to":"1.9.1","loc":4504,"days":20.96,"loc_per_day":214.9,"flagged":false},{"from":"1.9.1","to":"1.9.2","loc":1196,"days":3.97,"loc_per_day":301.6,"flagged":false},{"from":"1.9.2","to":"1.9.3","loc":135,"days":11.1,"loc_per_day":12.2,"flagged":false},{"from":"1.9.3","to":"1.9.4","loc":1,"days":13.7,"loc_per_day":0.1,"flagged":false},{"from":"1.9.4","to":"1.9.5","loc":22,"days":0.21,"loc_per_day":104.5,"flagged":false},{"from":"1.9.5","to":"1.9.6","loc":13,"days":2.3,"loc_per_day":5.6,"flagged":false},{"from":"1.9.6","to":"1.9.7","loc":201,"days":9.78,"loc_per_day":20.6,"flagged":false},{"from":"1.9.7","to":"1.9.8","loc":69,"days":1.01,"loc_per_day":68.2,"flagged":false},{"from":"1.9.8","to":"1.9.9","loc":1405,"days":22.99,"loc_per_day":61.1,"flagged":false},{"from":"1.9.9","to":"1.9.12","loc":1384,"days":13.68,"loc_per_day":101.1,"flagged":false},{"from":"1.9.12","to":"1.10.0","loc":2739,"days":14.23,"loc_per_day":192.5,"flagged":false},{"from":"1.10.0","to":"1.11.0","loc":1729,"days":12.67,"loc_per_day":136.4,"flagged":false},{"from":"1.11.0","to":"1.12.0","loc":2430,"days":7.13,"loc_per_day":340.8,"flagged":false},{"from":"1.12.0","to":"1.12.1","loc":41,"days":10.16,"loc_per_day":4.0,"flagged":false},{"from":"1.12.1","to":"1.12.4","loc":212,"days":3.85,"loc_per_day":55.1,"flagged":false},{"from":"1.12.4","to":"1.12.5","loc":20,"days":0.2,"loc_per_day":102.5,"flagged":false},{"from":"1.12.5","to":"1.12.6","loc":799,"days":12.24,"loc_per_day":65.3,"flagged":false},{"from":"1.12.6","to":"1.13.0","loc":4803,"days":19.94,"loc_per_day":240.9,"flagged":false},{"from":"1.13.0","to":"1.13.1","loc":2,"days":0.84,"loc_per_day":2.4,"flagged":false},{"from":"1.13.1","to":"1.13.2","loc":202,"days":5.08,"loc_per_day":39.8,"flagged":false},{"from":"1.13.2","to":"1.13.3","loc":0,"days":0.04,"loc_per_day":0.0,"flagged":false},{"from":"1.13.3","to":"1.13.4","loc":14,"days":5.81,"loc_per_day":2.4,"flagged":false},{"from":"1.13.4","to":"1.13.5","loc":35,"days":4.46,"loc_per_day":7.8,"flagged":false},{"from":"1.13.5","to":"1.13.6","loc":527,"days":8.82,"loc_per_day":59.7,"flagged":false},{"from":"1.13.6","to":"1.13.7","loc":150,"days":4.89,"loc_per_day":30.7,"flagged":false},{"from":"1.13.7","to":"1.13.8","loc":647,"days":5.09,"loc_per_day":127.1,"flagged":false},{"from":"1.13.8","to":"1.13.9","loc":1,"days":0.58,"loc_per_day":1.7,"flagged":false},{"from":"1.13.9","to":"1.13.10","loc":174,"days":1.28,"loc_per_day":136.4,"flagged":false},{"from":"1.13.10","to":"1.13.11","loc":482,"days":5.98,"loc_per_day":80.6,"flagged":false},{"from":"1.13.11","to":"1.13.12","loc":85,"days":1.04,"loc_per_day":81.4,"flagged":false},{"from":"1.13.12","to":"1.13.13","loc":101,"days":1.11,"loc_per_day":91.1,"flagged":false},{"from":"1.13.13","to":"1.13.16","loc":906,"days":4.61,"loc_per_day":196.7,"flagged":false},{"from":"1.13.16","to":"1.14.0","loc":54,"days":0.4,"loc_per_day":134.4,"flagged":false},{"from":"1.14.0","to":"1.14.1","loc":1057,"days":4.86,"loc_per_day":217.3,"flagged":false},{"from":"1.14.1","to":"1.14.2","loc":17,"days":3.98,"loc_per_day":4.3,"flagged":false},{"from":"1.14.2","to":"1.15.0","loc":1003,"days":12.81,"loc_per_day":78.3,"flagged":false},{"from":"1.15.0","to":"1.15.1","loc":338,"days":0.21,"loc_per_day":1587.8,"flagged":false},{"from":"1.15.1","to":"1.16.0","loc":1397,"days":8.03,"loc_per_day":173.9,"flagged":false},{"from":"1.16.0","to":"1.16.1","loc":777,"days":1.93,"loc_per_day":403.2,"flagged":false},{"from":"1.16.1","to":"1.16.3","loc":163,"days":7.04,"loc_per_day":23.2,"flagged":false},{"from":"1.16.3","to":"1.16.4","loc":30,"days":0.04,"loc_per_day":720.0,"flagged":false},{"from":"1.16.4","to":"1.17.0","loc":2731,"days":13.71,"loc_per_day":199.1,"flagged":false},{"from":"1.17.0","to":"1.17.1","loc":133,"days":10.28,"loc_per_day":12.9,"flagged":false},{"from":"1.17.1","to":"1.17.2","loc":74,"days":3.87,"loc_per_day":19.1,"flagged":false},{"from":"1.17.2","to":"1.17.3","loc":421,"days":18.29,"loc_per_day":23.0,"flagged":false},{"from":"1.17.3","to":"1.18.0","loc":968,"days":13.99,"loc_per_day":69.2,"flagged":false},{"from":"1.18.0","to":"1.18.1","loc":624,"days":4.06,"loc_per_day":153.6,"flagged":false},{"from":"1.18.1","to":"1.18.2","loc":15,"days":1.79,"loc_per_day":8.4,"flagged":false},{"from":"1.18.2","to":"1.18.3","loc":2,"days":0.72,"loc_per_day":2.8,"flagged":false},{"from":"1.18.3","to":"1.18.4","loc":47,"days":0.54,"loc_per_day":87.5,"flagged":false},{"from":"1.18.4","to":"1.18.5","loc":49,"days":0.67,"loc_per_day":73.1,"flagged":false},{"from":"1.18.5","to":"1.18.6","loc":34,"days":0.94,"loc_per_day":36.1,"flagged":false},{"from":"1.18.6","to":"1.19.0","loc":28,"days":1.14,"loc_per_day":24.5,"flagged":false},{"from":"1.19.0","to":"1.19.2","loc":546,"days":14.78,"loc_per_day":36.9,"flagged":false},{"from":"1.19.2","to":"1.19.4","loc":126,"days":5.25,"loc_per_day":24.0,"flagged":false},{"from":"1.19.4","to":"1.20.1","loc":944,"days":7.0,"loc_per_day":134.9,"flagged":false},{"from":"1.20.1","to":"1.20.3","loc":432,"days":6.65,"loc_per_day":64.9,"flagged":false},{"from":"1.20.3","to":"1.21.0","loc":352,"days":33.18,"loc_per_day":10.6,"flagged":false},{"from":"1.21.0","to":"1.21.1","loc":89,"days":8.06,"loc_per_day":11.0,"flagged":false},{"from":"1.21.1","to":"1.21.2","loc":75,"days":1.17,"loc_per_day":63.9,"flagged":false},{"from":"1.21.2","to":"1.22.0","loc":7933,"days":26.21,"loc_per_day":302.7,"flagged":false},{"from":"1.22.0","to":"1.22.1","loc":241,"days":15.64,"loc_per_day":15.4,"flagged":false},{"from":"1.22.1","to":"1.22.2","loc":2374,"days":10.44,"loc_per_day":227.3,"flagged":false},{"from":"1.22.2","to":"1.22.3","loc":37,"days":0.49,"loc_per_day":75.7,"flagged":false},{"from":"1.22.3","to":"1.22.4","loc":34,"days":1.16,"loc_per_day":29.2,"flagged":false},{"from":"1.22.4","to":"1.22.6","loc":246,"days":4.23,"loc_per_day":58.1,"flagged":false},{"from":"1.22.6","to":"1.22.7","loc":11,"days":1.89,"loc_per_day":5.8,"flagged":false},{"from":"1.22.7","to":"1.22.9","loc":323,"days":4.92,"loc_per_day":65.6,"flagged":false},{"from":"1.22.9","to":"1.23.0","loc":7096,"days":19.88,"loc_per_day":357.0,"flagged":false},{"from":"1.23.0","to":"1.23.2","loc":4397,"days":7.26,"loc_per_day":605.9,"flagged":false},{"from":"1.23.2","to":"1.23.3","loc":445,"days":3.14,"loc_per_day":141.7,"flagged":false},{"from":"1.23.3","to":"1.23.4","loc":1011,"days":2.01,"loc_per_day":504.1,"flagged":false},{"from":"1.23.4","to":"1.23.5","loc":2792,"days":25.76,"loc_per_day":108.4,"flagged":false},{"from":"1.23.5","to":"1.23.6","loc":31,"days":2.61,"loc_per_day":11.9,"flagged":false},{"from":"1.23.6","to":"1.23.7","loc":100,"days":8.03,"loc_per_day":12.4,"flagged":false},{"from":"1.23.7","to":"1.24.0","loc":6099,"days":87.4,"loc_per_day":69.8,"flagged":false},{"from":"1.24.0","to":"1.24.1","loc":515,"days":1.99,"loc_per_day":258.3,"flagged":false},{"from":"1.24.1","to":"1.24.2","loc":5,"days":0.52,"loc_per_day":9.5,"flagged":false},{"from":"1.24.2","to":"1.24.3","loc":1,"days":13.43,"loc_per_day":0.1,"flagged":false},{"from":"1.24.3","to":"1.24.6","loc":2490,"days":9.98,"loc_per_day":249.5,"flagged":false},{"from":"1.24.6","to":"1.25.0","loc":3582,"days":16.24,"loc_per_day":220.6,"flagged":false},{"from":"1.25.0","to":"1.25.2","loc":375,"days":10.65,"loc_per_day":35.2,"flagged":false},{"from":"1.25.2","to":"1.25.3","loc":184,"days":1.81,"loc_per_day":101.9,"flagged":false},{"from":"1.25.3","to":"1.25.7","loc":1327,"days":11.39,"loc_per_day":116.5,"flagged":false},{"from":"1.25.7","to":"1.25.9","loc":5898,"days":16.84,"loc_per_day":350.1,"flagged":false},{"from":"1.25.9","to":"1.26.0","loc":2024,"days":94.29,"loc_per_day":21.5,"flagged":false},{"from":"1.26.0","to":"1.27.0","loc":4741,"days":125.16,"loc_per_day":37.9,"flagged":false},{"from":"1.27.0","to":"1.28.0","loc":987,"days":11.94,"loc_per_day":82.6,"flagged":false},{"from":"1.28.0","to":"1.29.0","loc":1324,"days":45.31,"loc_per_day":29.2,"flagged":false},{"from":"1.29.0","to":"1.30.0","loc":3183,"days":149.66,"loc_per_day":21.3,"flagged":false}]},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":63440.0,"index":0.0,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":0.0,"per_kloc:emoji_in_code":0.0,"files:emoji_in_code":0.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":6.0,"secrets_low_confidence":2.0},"findings":[{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree (test/docs/example file)","path":"README.md","line":87,"fingerprint":"README.md:generic-api-key:87"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree (test/docs/example file)","path":"README-CN.md","line":87,"fingerprint":"README-CN.md:generic-api-key:87"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree (test/docs/example file)","path":"lib/utilcode/src/test/java/com/blankj/utilcode/util/EncryptUtilsTest.java","line":274,"fingerprint":"lib/utilcode/src/test/java/com/blankj/utilcode/util/EncryptUtilsTest.java:generic-api-key:274"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit c0dd366b78); removed from the current tree but still retrievable","path":"gradle.properties","line":23,"fingerprint":"c0dd366b78475336407c9eed645156e9f27951fc:gradle.properties:generic-api-key:23"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 208aee9a37); removed from the current tree but still retrievable","path":"utilcode/lib/src/test/java/com/blankj/utilcode/util/EncryptUtilsTest.java","line":377,"fingerprint":"208aee9a37827e062f6429bbe8de0557d42719c7:utilcode/lib/src/test/java/com/blankj/utilcode/util/EncryptUtilsTest.java:generic-api-key:377"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 1c36d1eddf); removed from the current tree but still retrievable","path":"utilcode-kotlin/src/test/java/com/blankj/utilcode/util/EncryptUtilsTest.java","line":490,"fingerprint":"1c36d1eddff8a16a060301a8ee9cd0781015f02a:utilcode-kotlin/src/test/java/com/blankj/utilcode/util/EncryptUtilsTest.java:generic-api-key:490"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit b45808d3ed); removed from the current tree but still retrievable","path":"utilcode/src/test/java/com/blankj/utilcode/util/EncryptUtilsTest.java","line":525,"fingerprint":"b45808d3ed9d0eb1e4cec30733e89e7860d2b6f1:utilcode/src/test/java/com/blankj/utilcode/util/EncryptUtilsTest.java:generic-api-key:525"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 58d584e4f2); removed from the current tree but still retrievable","path":"utilcode/local.properties","line":3,"fingerprint":"58d584e4f2d803f15381fcd8e2094ee46e650914:utilcode/local.properties:generic-api-key:3"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":29.0,"findings_high":1.0,"findings_medium":28.0,"findings_low":0.0,"weighted_findings":11.4,"scanned_lines":63440.0,"parse_errors":1.0},"findings":[{"rule_id":"opengrep/java.lang.security.audit.command-injection-process-builder","severity":"high","message":"A formatted or concatenated string was detected as input to a ProcessBuilder call. This is dangerous if a variable is controlled by user input and could result in a command injection. Ensure your variables are not controlled by users or sufficiently sanitized. [confidence low]","path":"lib/utilcode/src/main/java/com/blankj/utilcode/util/DeviceUtils.java","line":417,"fingerprint":"java.lang.security.audit.command-injection-process-builder:lib/utilcode/src/main/java/com/blankj/utilcode/util/DeviceUtils.java:417"},{"rule_id":"opengrep/java.android.security.exported_activity","severity":"medium","message":"The application exports an activity. Any application on the device can launch the exported activity which may compromise the integrity of your application or its data.  Ensure that any exported activities do not have privileged access to your application's control plane. [confidence medium]","path":"feature/launcher/app/src/main/AndroidManifest.xml","line":13,"fingerprint":"java.android.security.exported_activity:feature/launcher/app/src/main/AndroidManifest.xml:13"},{"rule_id":"opengrep/java.android.security.exported_activity","severity":"medium","message":"The application exports an activity. Any application on the device can launch the exported activity which may compromise the integrity of your application or its data.  Ensure that any exported activities do not have privileged access to your application's control plane. [confidence medium]","path":"feature/main/app/src/main/AndroidManifest.xml","line":12,"fingerprint":"java.android.security.exported_activity:feature/main/app/src/main/AndroidManifest.xml:12"},{"rule_id":"opengrep/java.android.security.exported_activity","severity":"medium","message":"The application exports an activity. Any application on the device can launch the exported activity which may compromise the integrity of your application or its data.  Ensure that any exported activities do not have privileged access to your application's control plane. [confidence medium]","path":"feature/subutil/app/src/main/AndroidManifest.xml","line":12,"fingerprint":"java.android.security.exported_activity:feature/subutil/app/src/main/AndroidManifest.xml:12"},{"rule_id":"opengrep/java.android.security.exported_activity","severity":"medium","message":"The application exports an activity. Any application on the device can launch the exported activity which may compromise the integrity of your application or its data.  Ensure that any exported activities do not have privileged access to your application's control plane. [confidence medium]","path":"feature/utilcode/app/src/main/AndroidManifest.xml","line":12,"fingerprint":"java.android.security.exported_activity:feature/utilcode/app/src/main/AndroidManifest.xml:12"},{"rule_id":"opengrep/java.lang.security.audit.crypto.ssl.insecure-hostname-verifier","severity":"medium","message":"Insecure HostnameVerifier implementation detected. This will accept any SSL certificate with any hostname, which creates the possibility for man-in-the-middle attacks. [confidence low]","path":"lib/subutil/src/main/java/com/blankj/subutil/util/http/SSLConfig.java","line":42,"fingerprint":"java.lang.security.audit.crypto.ssl.insecure-hostname-verifier:lib/subutil/src/main/java/com/blankj/subutil/util/http/SSLConfig.java:42"},{"rule_id":"opengrep/java.lang.security.audit.crypto.ssl.insecure-trust-manager","severity":"medium","message":"Detected empty trust manager implementations. This is dangerous because it accepts any certificate, enabling man-in-the-middle attacks. Consider using a KeyStore and TrustManagerFactory instead. See https://stackoverflow.com/questions/2642777/trusting-all-certificates-using-httpclient-over-https for [confidence low]","path":"lib/subutil/src/main/java/com/blankj/subutil/util/http/SSLConfig.java","line":68,"fingerprint":"java.lang.security.audit.crypto.ssl.insecure-trust-manager:lib/subutil/src/main/java/com/blankj/subutil/util/http/SSLConfig.java:68"},{"rule_id":"opengrep/java.lang.security.audit.crypto.ssl.insecure-trust-manager","severity":"medium","message":"Detected empty trust manager implementations. This is dangerous because it accepts any certificate, enabling man-in-the-middle attacks. Consider using a KeyStore and TrustManagerFactory instead. See https://stackoverflow.com/questions/2642777/trusting-all-certificates-using-httpclient-over-https for [confidence low]","path":"lib/subutil/src/main/java/com/blankj/subutil/util/http/SSLConfig.java","line":72,"fingerprint":"java.lang.security.audit.crypto.ssl.insecure-trust-manager:lib/subutil/src/main/java/com/blankj/subutil/util/http/SSLConfig.java:72"},{"rule_id":"opengrep/java.lang.security.audit.crypto.ssl.insecure-trust-manager","severity":"medium","message":"Detected empty trust manager implementations. This is dangerous because it accepts any certificate, enabling man-in-the-middle attacks. Consider using a KeyStore and TrustManagerFactory instead. See https://stackoverflow.com/questions/2642777/trusting-all-certificates-using-httpclient-over-https for [confidence low]","path":"lib/subutil/src/main/java/com/blankj/subutil/util/http/SSLConfig.java","line":81,"fingerprint":"java.lang.security.audit.crypto.ssl.insecure-trust-manager:lib/subutil/src/main/java/com/blankj/subutil/util/http/SSLConfig.java:81"},{"rule_id":"opengrep/java.lang.security.audit.crypto.ssl.insecure-trust-manager","severity":"medium","message":"Detected empty trust manager implementations. This is dangerous because it accepts any certificate, enabling man-in-the-middle attacks. Consider using a KeyStore and TrustManagerFactory instead. See https://stackoverflow.com/questions/2642777/trusting-all-certificates-using-httpclient-over-https for [confidence low]","path":"lib/subutil/src/main/java/com/blankj/subutil/util/http/SSLConfig.java","line":85,"fingerprint":"java.lang.security.audit.crypto.ssl.insecure-trust-manager:lib/subutil/src/main/java/com/blankj/subutil/util/http/SSLConfig.java:85"},{"rule_id":"opengrep/java.lang.security.audit.crypto.ssl.insecure-trust-manager","severity":"medium","message":"Detected empty trust manager implementations. This is dangerous because it accepts any certificate, enabling man-in-the-middle attacks. Consider using a KeyStore and TrustManagerFactory instead. See https://stackoverflow.com/questions/2642777/trusting-all-certificates-using-httpclient-over-https for [confidence low]","path":"lib/subutil/src/main/java/com/blankj/subutil/util/http/SSLConfig.java","line":89,"fingerprint":"java.lang.security.audit.crypto.ssl.insecure-trust-manager:lib/subutil/src/main/java/com/blankj/subutil/util/http/SSLConfig.java:89"},{"rule_id":"opengrep/java.lang.security.audit.crypto.ssl.insecure-trust-manager","severity":"medium","message":"Detected empty trust manager implementations. This is dangerous because it accepts any certificate, enabling man-in-the-middle attacks. Consider using a KeyStore and TrustManagerFactory instead. See https://stackoverflow.com/questions/2642777/trusting-all-certificates-using-httpclient-over-https for [confidence low]","path":"lib/subutil/src/main/java/com/blankj/subutil/util/http/SSLConfig.java","line":93,"fingerprint":"java.lang.security.audit.crypto.ssl.insecure-trust-manager:lib/subutil/src/main/java/com/blankj/subutil/util/http/SSLConfig.java:93"},{"rule_id":"opengrep/java.lang.security.audit.crypto.ssl.insecure-trust-manager","severity":"medium","message":"Detected empty trust manager implementations. This is dangerous because it accepts any certificate, enabling man-in-the-middle attacks. Consider using a KeyStore and TrustManagerFactory instead. See https://stackoverflow.com/questions/2642777/trusting-all-certificates-using-httpclient-over-https for [confidence low]","path":"lib/subutil/src/main/java/com/blankj/subutil/util/http/SSLConfig.java","line":101,"fingerprint":"java.lang.security.audit.crypto.ssl.insecure-trust-manager:lib/subutil/src/main/java/com/blankj/subutil/util/http/SSLConfig.java:101"},{"rule_id":"opengrep/java.lang.security.audit.crypto.ssl.insecure-trust-manager","severity":"medium","message":"Detected empty trust manager implementations. This is dangerous because it accepts any certificate, enabling man-in-the-middle attacks. Consider using a KeyStore and TrustManagerFactory instead. See https://stackoverflow.com/questions/2642777/trusting-all-certificates-using-httpclient-over-https for [confidence low]","path":"lib/subutil/src/main/java/com/blankj/subutil/util/http/SSLConfig.java","line":105,"fingerprint":"java.lang.security.audit.crypto.ssl.insecure-trust-manager:lib/subutil/src/main/java/com/blankj/subutil/util/http/SSLConfig.java:105"},{"rule_id":"opengrep/java.lang.security.audit.weak-ssl-context","severity":"medium","message":"An insecure SSL context was detected. TLS versions 1.0, 1.1, and all SSL versions are considered weak encryption and are deprecated. Use SSLContext.getInstance(\"TLSv1.2\") for the best security. [confidence high]","path":"lib/subutil/src/main/java/com/blankj/subutil/util/http/SSLConfig.java","line":123,"fingerprint":"java.lang.security.audit.weak-ssl-context:lib/subutil/src/main/java/com/blankj/subutil/util/http/SSLConfig.java:123"},{"rule_id":"opengrep/java.lang.security.audit.unsafe-reflection","severity":"medium","message":"If an attacker can supply values that the application then uses to determine which class to instantiate or which method to invoke, the potential exists for the attacker to create control flow paths through the application that were not intended by the application developers. This attack vector may a [confidence low]","path":"lib/utilcode/src/main/java/com/blankj/utilcode/util/BusUtils.java","line":143,"fingerprint":"java.lang.security.audit.unsafe-reflection:lib/utilcode/src/main/java/com/blankj/utilcode/util/BusUtils.java:143"},{"rule_id":"opengrep/java.lang.security.audit.unsafe-reflection","severity":"medium","message":"If an attacker can supply values that the application then uses to determine which class to instantiate or which method to invoke, the potential exists for the attacker to create control flow paths through the application that were not intended by the application developers. This attack vector may a [confidence low]","path":"lib/utilcode/src/main/java/com/blankj/utilcode/util/BusUtils.java","line":241,"fingerprint":"java.lang.security.audit.unsafe-reflection:lib/utilcode/src/main/java/com/blankj/utilcode/util/BusUtils.java:241"},{"rule_id":"opengrep/java.lang.security.audit.unsafe-reflection","severity":"medium","message":"If an attacker can supply values that the application then uses to determine which class to instantiate or which method to invoke, the potential exists for the attacker to create control flow paths through the application that were not intended by the application developers. This attack vector may a [confidence low]","path":"lib/utilcode/src/main/java/com/blankj/utilcode/util/BusUtils.java","line":243,"fingerprint":"java.lang.security.audit.unsafe-reflection:lib/utilcode/src/main/java/com/blankj/utilcode/util/BusUtils.java:243"},{"rule_id":"opengrep/java.lang.security.audit.unsafe-reflection","severity":"medium","message":"If an attacker can supply values that the application then uses to determine which class to instantiate or which method to invoke, the potential exists for the attacker to create control flow paths through the application that were not intended by the application developers. This attack vector may a [confidence low]","path":"lib/utilcode/src/main/java/com/blankj/utilcode/util/BusUtils.java","line":272,"fingerprint":"java.lang.security.audit.unsafe-reflection:lib/utilcode/src/main/java/com/blankj/utilcode/util/BusUtils.java:272"},{"rule_id":"opengrep/java.lang.security.audit.object-deserialization","severity":"medium","message":"Found object deserialization using ObjectInputStream. Deserializing entire Java objects is dangerous because malicious actors can create Java object streams with unintended consequences. Ensure that the objects being deserialized are not user-controlled. If this must be done, consider using HMACs to [confidence low]","path":"lib/utilcode/src/main/java/com/blankj/utilcode/util/ConvertUtils.java","line":326,"fingerprint":"java.lang.security.audit.object-deserialization:lib/utilcode/src/main/java/com/blankj/utilcode/util/ConvertUtils.java:326"},{"rule_id":"opengrep/java.lang.security.audit.crypto.use-of-md5","severity":"medium","message":"Detected MD5 hash algorithm which is considered insecure. MD5 is not collision resistant and is therefore not suitable as a cryptographic signature. Use HMAC instead. [confidence high]","path":"lib/utilcode/src/main/java/com/blankj/utilcode/util/EncryptUtils.java","line":181,"fingerprint":"java.lang.security.audit.crypto.use-of-md5:lib/utilcode/src/main/java/com/blankj/utilcode/util/EncryptUtils.java:181"},{"rule_id":"opengrep/java.lang.security.audit.crypto.use-of-md5","severity":"medium","message":"Detected MD5 hash algorithm which is considered insecure. MD5 is not collision resistant and is therefore not suitable as a cryptographic signature. Use HMAC instead. [confidence high]","path":"lib/utilcode/src/main/java/com/blankj/utilcode/util/FileUtils.java","line":1263,"fingerprint":"java.lang.security.audit.crypto.use-of-md5:lib/utilcode/src/main/java/com/blankj/utilcode/util/FileUtils.java:1263"},{"rule_id":"opengrep/java.lang.security.audit.unsafe-reflection","severity":"medium","message":"If an attacker can supply values that the application then uses to determine which class to instantiate or which method to invoke, the potential exists for the attacker to create control flow paths through the application that were not intended by the application developers. This attack vector may a [confidence low]","path":"lib/utilcode/src/main/java/com/blankj/utilcode/util/LogUtils.java","line":1192,"fingerprint":"java.lang.security.audit.unsafe-reflection:lib/utilcode/src/main/java/com/blankj/utilcode/util/LogUtils.java:1192"},{"rule_id":"opengrep/java.lang.security.audit.unsafe-reflection","severity":"medium","message":"If an attacker can supply values that the application then uses to determine which class to instantiate or which method to invoke, the potential exists for the attacker to create control flow paths through the application that were not intended by the application developers. This attack vector may a [confidence low]","path":"lib/utilcode/src/main/java/com/blankj/utilcode/util/LogUtils.java","line":1224,"fingerprint":"java.lang.security.audit.unsafe-reflection:lib/utilcode/src/main/java/com/blankj/utilcode/util/LogUtils.java:1224"},{"rule_id":"opengrep/java.lang.security.audit.unsafe-reflection","severity":"medium","message":"If an attacker can supply values that the application then uses to determine which class to instantiate or which method to invoke, the potential exists for the attacker to create control flow paths through the application that were not intended by the application developers. This attack vector may a [confidence low]","path":"lib/utilcode/src/main/java/com/blankj/utilcode/util/ReflectUtils.java","line":96,"fingerprint":"java.lang.security.audit.unsafe-reflection:lib/utilcode/src/main/java/com/blankj/utilcode/util/ReflectUtils.java:96"},{"rule_id":"opengrep/java.lang.security.audit.unsafe-reflection","severity":"medium","message":"If an attacker can supply values that the application then uses to determine which class to instantiate or which method to invoke, the potential exists for the attacker to create control flow paths through the application that were not intended by the application developers. This attack vector may a [confidence low]","path":"lib/utilcode/src/main/java/com/blankj/utilcode/util/ReflectUtils.java","line":104,"fingerprint":"java.lang.security.audit.unsafe-reflection:lib/utilcode/src/main/java/com/blankj/utilcode/util/ReflectUtils.java:104"},{"rule_id":"opengrep/java.lang.security.audit.unsafe-reflection","severity":"medium","message":"If an attacker can supply values that the application then uses to determine which class to instantiate or which method to invoke, the potential exists for the attacker to create control flow paths through the application that were not intended by the application developers. This attack vector may a [confidence low]","path":"lib/utilcode/src/main/java/com/blankj/utilcode/util/ServiceUtils.java","line":53,"fingerprint":"java.lang.security.audit.unsafe-reflection:lib/utilcode/src/main/java/com/blankj/utilcode/util/ServiceUtils.java:53"},{"rule_id":"opengrep/java.lang.security.audit.unsafe-reflection","severity":"medium","message":"If an attacker can supply values that the application then uses to determine which class to instantiate or which method to invoke, the potential exists for the attacker to create control flow paths through the application that were not intended by the application developers. This attack vector may a [confidence low]","path":"lib/utilcode/src/main/java/com/blankj/utilcode/util/ServiceUtils.java","line":94,"fingerprint":"java.lang.security.audit.unsafe-reflection:lib/utilcode/src/main/java/com/blankj/utilcode/util/ServiceUtils.java:94"},{"rule_id":"opengrep/java.lang.security.audit.unsafe-reflection","severity":"medium","message":"If an attacker can supply values that the application then uses to determine which class to instantiate or which method to invoke, the potential exists for the attacker to create control flow paths through the application that were not intended by the application developers. This attack vector may a [confidence low]","path":"lib/utilcode/src/main/java/com/blankj/utilcode/util/ServiceUtils.java","line":146,"fingerprint":"java.lang.security.audit.unsafe-reflection:lib/utilcode/src/main/java/com/blankj/utilcode/util/ServiceUtils.java:146"}],"evidence":[],"data":{"rulesets":["java","kotlin","bash"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"ok","tool_version":"zizmor 1.32.0","metrics":{"workflows":1.0,"findings":4.0,"findings_high":2.0,"findings_medium":2.0,"findings_low":0.0,"penalty":27.6},"findings":[{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/android.yml","line":11,"fingerprint":"unpinned-uses:.github/workflows/android.yml:11"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/android.yml","line":13,"fingerprint":"unpinned-uses:.github/workflows/android.yml:13"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/android.yml","line":11,"fingerprint":"artipacked:.github/workflows/android.yml:11"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/android.yml","line":6,"fingerprint":"excessive-permissions:.github/workflows/android.yml:6"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":1.0,"signed_commit_share":0.07,"unpinned_manifests":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":1.0,"binary_assets":10.0,"suspicious":0.0},"findings":[],"evidence":[{"kind":"binary-release-asset","description":"release 1.30.0 ships util_1_30_0_release.apk (1011 downloads)","ref":"util_1_30_0_release.apk","url":"https://github.com/Blankj/AndroidUtilCode/releases/download/1.30.0/util_1_30_0_release.apk","weight":0.0},{"kind":"binary-release-asset","description":"release 1.30.0 ships util_1_30_5_release.apk (1391 downloads)","ref":"util_1_30_5_release.apk","url":"https://github.com/Blankj/AndroidUtilCode/releases/download/1.30.0/util_1_30_5_release.apk","weight":0.0},{"kind":"binary-release-asset","description":"release 1.29.0 ships util_1_29_0_release.apk (386 downloads)","ref":"util_1_29_0_release.apk","url":"https://github.com/Blankj/AndroidUtilCode/releases/download/1.29.0/util_1_29_0_release.apk","weight":0.0},{"kind":"binary-release-asset","description":"release 1.28.0 ships util_1_28_0_release.apk (187 downloads)","ref":"util_1_28_0_release.apk","url":"https://github.com/Blankj/AndroidUtilCode/releases/download/1.28.0/util_1_28_0_release.apk","weight":0.0},{"kind":"binary-release-asset","description":"release 1.27.0 ships util_1_27_0_release.apk (112 downloads)","ref":"util_1_27_0_release.apk","url":"https://github.com/Blankj/AndroidUtilCode/releases/download/1.27.0/util_1_27_0_release.apk","weight":0.0}],"data":{"signals":["binary-release-assets"],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":4508.0,"function_nloc":30941.0,"mean_ccn":1.87,"p90_ccn":4.0,"complex_functions":13.0,"long_functions":8.0,"many_param_functions":22.0,"risky_nloc_share":0.0575},"findings":[],"evidence":[{"kind":"complex-function","description":"UriUtils::uri2FileReal in lib/utilcode/src/main/java/com/blankj/utilcode/util/UriUtils.java: complexity 40, 153 lines","ref":"lib/utilcode/src/main/java/com/blankj/utilcode/util/UriUtils.java","url":"https://github.com/Blankj/AndroidUtilCode/blob/7b4caf9e5440046b3fefb63b6b6e2ead7ebaf809/lib/utilcode/src/main/java/com/blankj/utilcode/util/UriUtils.java#L97","weight":0.6666666666666666},{"kind":"complex-function","description":"SpanUtils::updateCharCharSequence in lib/utilcode/src/main/java/com/blankj/utilcode/util/SpanUtils.java: complexity 31, 112 lines","ref":"lib/utilcode/src/main/java/com/blankj/utilcode/util/SpanUtils.java","url":"https://github.com/Blankj/AndroidUtilCode/blob/7b4caf9e5440046b3fefb63b6b6e2ead7ebaf809/lib/utilcode/src/main/java/com/blankj/utilcode/util/SpanUtils.java#L857","weight":0.5166666666666667},{"kind":"complex-function","description":"FragmentUtils::operate in lib/utilcode/src/main/java/com/blankj/utilcode/util/FragmentUtils.java: complexity 27, 72 lines","ref":"lib/utilcode/src/main/java/com/blankj/utilcode/util/FragmentUtils.java","url":"https://github.com/Blankj/AndroidUtilCode/blob/7b4caf9e5440046b3fefb63b6b6e2ead7ebaf809/lib/utilcode/src/main/java/com/blankj/utilcode/util/FragmentUtils.java#L1459","weight":0.45},{"kind":"complex-function","description":"LogFormatter::intent2String in lib/utilcode/src/main/java/com/blankj/utilcode/util/LogUtils.java: complexity 27, 109 lines","ref":"lib/utilcode/src/main/java/com/blankj/utilcode/util/LogUtils.java","url":"https://github.com/Blankj/AndroidUtilCode/blob/7b4caf9e5440046b3fefb63b6b6e2ead7ebaf809/lib/utilcode/src/main/java/com/blankj/utilcode/util/LogUtils.java#L956","weight":0.45},{"kind":"complex-function","description":"ObjectUtils::isEmpty in lib/utilcode/src/main/java/com/blankj/utilcode/util/ObjectUtils.java: complexity 26, 44 lines","ref":"lib/utilcode/src/main/java/com/blankj/utilcode/util/ObjectUtils.java","url":"https://github.com/Blankj/AndroidUtilCode/blob/7b4caf9e5440046b3fefb63b6b6e2ead7ebaf809/lib/utilcode/src/main/java/com/blankj/utilcode/util/ObjectUtils.java#L40","weight":0.43333333333333335},{"kind":"complex-function","description":"PhoneUtils::getImeiOrMeid in lib/utilcode/src/main/java/com/blankj/utilcode/util/PhoneUtils.java: complexity 26, 65 lines","ref":"lib/utilcode/src/main/java/com/blankj/utilcode/util/PhoneUtils.java","url":"https://github.com/Blankj/AndroidUtilCode/blob/7b4caf9e5440046b3fefb63b6b6e2ead7ebaf809/lib/utilcode/src/main/java/com/blankj/utilcode/util/PhoneUtils.java#L112","weight":0.43333333333333335},{"kind":"complex-function","description":"RomUtils::getRomInfo in lib/utilcode/src/main/java/com/blankj/utilcode/util/RomUtils.java: complexity 23, 84 lines","ref":"lib/utilcode/src/main/java/com/blankj/utilcode/util/RomUtils.java","url":"https://github.com/Blankj/AndroidUtilCode/blob/7b4caf9e5440046b3fefb63b6b6e2ead7ebaf809/lib/utilcode/src/main/java/com/blankj/utilcode/util/RomUtils.java#L249","weight":0.38333333333333336},{"kind":"complex-function","description":"ArrayUtils::forAllDo in lib/utilcode/src/main/java/com/blankj/utilcode/util/ArrayUtils.java: complexity 22, 60 lines","ref":"lib/utilcode/src/main/java/com/blankj/utilcode/util/ArrayUtils.java","url":"https://github.com/Blankj/AndroidUtilCode/blob/7b4caf9e5440046b3fefb63b6b6e2ead7ebaf809/lib/utilcode/src/main/java/com/blankj/utilcode/util/ArrayUtils.java#L2048","weight":0.36666666666666664},{"kind":"complex-function","description":"FileUtils::isUtf8 in lib/utilcode/src/main/java/com/blankj/utilcode/util/FileUtils.java: complexity 21, 54 lines","ref":"lib/utilcode/src/main/java/com/blankj/utilcode/util/FileUtils.java","url":"https://github.com/Blankj/AndroidUtilCode/blob/7b4caf9e5440046b3fefb63b6b6e2ead7ebaf809/lib/utilcode/src/main/java/com/blankj/utilcode/util/FileUtils.java#L983","weight":0.35},{"kind":"complex-function","description":"ShellUtils::execCmd in lib/utilcode/src/main/java/com/blankj/utilcode/util/ShellUtils.java: complexity 21, 83 lines","ref":"lib/utilcode/src/main/java/com/blankj/utilcode/util/ShellUtils.java","url":"https://github.com/Blankj/AndroidUtilCode/blob/7b4caf9e5440046b3fefb63b6b6e2ead7ebaf809/lib/utilcode/src/main/java/com/blankj/utilcode/util/ShellUtils.java#L281","weight":0.35}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":38733.0,"duplicated_lines":5619.0,"duplicated_share":0.1451,"files":299.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: feature/launcher/app/src/main/java/com/blankj/launcher/app/LauncherApp.java:6 and feature/main/app/src/main/java/com/blankj/main/app/MainApp.java:8","ref":"feature/launcher/app/src/main/java/com/blankj/launcher/app/LauncherApp.java","url":"https://github.com/Blankj/AndroidUtilCode/blob/7b4caf9e5440046b3fefb63b6b6e2ead7ebaf809/feature/launcher/app/src/main/java/com/blankj/launcher/app/LauncherApp.java#L6","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: feature/main/pkg/src/main/java/com/blankj/main/pkg/MainActivity.kt:20 and feature/subutil/pkg/src/main/java/com/blankj/subutil/pkg/feature/SubUtilActivity.kt:18","ref":"feature/main/pkg/src/main/java/com/blankj/main/pkg/MainActivity.kt","url":"https://github.com/Blankj/AndroidUtilCode/blob/7b4caf9e5440046b3fefb63b6b6e2ead7ebaf809/feature/main/pkg/src/main/java/com/blankj/main/pkg/MainActivity.kt#L20","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: feature/mock/src/main/java/com/blankj/mock/subutil/SubUtilApiMock.java:10 and feature/mock/src/main/java/com/blankj/mock/utilcode/UtilCodeApiMock.java:10","ref":"feature/mock/src/main/java/com/blankj/mock/subutil/SubUtilApiMock.java","url":"https://github.com/Blankj/AndroidUtilCode/blob/7b4caf9e5440046b3fefb63b6b6e2ead7ebaf809/feature/mock/src/main/java/com/blankj/mock/subutil/SubUtilApiMock.java#L10","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: feature/subutil/app/src/main/java/com/blankj/subutil/app/SubUtilApp.kt:8 and feature/utilcode/app/src/main/java/com/blankj/utilcode/app/UtilCodeApp.kt:8","ref":"feature/subutil/app/src/main/java/com/blankj/subutil/app/SubUtilApp.kt","url":"https://github.com/Blankj/AndroidUtilCode/blob/7b4caf9e5440046b3fefb63b6b6e2ead7ebaf809/feature/subutil/app/src/main/java/com/blankj/subutil/app/SubUtilApp.kt#L8","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: feature/subutil/pkg/src/main/java/com/blankj/subutil/pkg/Config.kt:7 and feature/utilcode/pkg/src/main/java/com/blankj/utilcode/pkg/Config.kt:6","ref":"feature/subutil/pkg/src/main/java/com/blankj/subutil/pkg/Config.kt","url":"https://github.com/Blankj/AndroidUtilCode/blob/7b4caf9e5440046b3fefb63b6b6e2ead7ebaf809/feature/subutil/pkg/src/main/java/com/blankj/subutil/pkg/Config.kt#L7","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: feature/subutil/pkg/src/main/java/com/blankj/subutil/pkg/feature/dangerous/DangerousActivity.kt:108 and feature/utilcode/pkg/src/main/java/com/blankj/utilcode/pkg/feature/app/AppActivity.kt:147","ref":"feature/subutil/pkg/src/main/java/com/blankj/subutil/pkg/feature/dangerous/DangerousActivity.kt","url":"https://github.com/Blankj/AndroidUtilCode/blob/7b4caf9e5440046b3fefb63b6b6e2ead7ebaf809/feature/subutil/pkg/src/main/java/com/blankj/subutil/pkg/feature/dangerous/DangerousActivity.kt#L108","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: feature/utilcode/export/src/main/java/com/blankj/utilcode/export/api/UtilCodeApi.java:9 and feature/utilcode/pkg/src/main/java/com/blankj/utilcode/pkg/UtilCodeApiImpl.java:10","ref":"feature/utilcode/export/src/main/java/com/blankj/utilcode/export/api/UtilCodeApi.java","url":"https://github.com/Blankj/AndroidUtilCode/blob/7b4caf9e5440046b3fefb63b6b6e2ead7ebaf809/feature/utilcode/export/src/main/java/com/blankj/utilcode/export/api/UtilCodeApi.java#L9","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: feature/utilcode/pkg/src/main/java/com/blankj/utilcode/pkg/feature/activity/ActivityActivity.kt:24 and feature/utilcode/pkg/src/main/java/com/blankj/utilcode/pkg/feature/activity/SubActivityActivity.kt:15","ref":"feature/utilcode/pkg/src/main/java/com/blankj/utilcode/pkg/feature/activity/ActivityActivity.kt","url":"https://github.com/Blankj/AndroidUtilCode/blob/7b4caf9e5440046b3fefb63b6b6e2ead7ebaf809/feature/utilcode/pkg/src/main/java/com/blankj/utilcode/pkg/feature/activity/ActivityActivity.kt#L24","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: feature/utilcode/pkg/src/main/java/com/blankj/utilcode/pkg/feature/api/other/export/OtherModuleApi.java:6 and feature/utilcode/pkg/src/main/java/com/blankj/utilcode/pkg/feature/api/other/pkg/OtherPkgApiImpl.java:8","ref":"feature/utilcode/pkg/src/main/java/com/blankj/utilcode/pkg/feature/api/other/export/OtherModuleApi.java","url":"https://github.com/Blankj/AndroidUtilCode/blob/7b4caf9e5440046b3fefb63b6b6e2ead7ebaf809/feature/utilcode/pkg/src/main/java/com/blankj/utilcode/pkg/feature/api/other/export/OtherModuleApi.java#L6","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: feature/utilcode/pkg/src/main/java/com/blankj/utilcode/pkg/feature/bar/BarActivity.kt:17 and feature/utilcode/pkg/src/main/java/com/blankj/utilcode/pkg/feature/bar/status/BarStatusActivityAlpha.kt:18","ref":"feature/utilcode/pkg/src/main/java/com/blankj/utilcode/pkg/feature/bar/BarActivity.kt","url":"https://github.com/Blankj/AndroidUtilCode/blob/7b4caf9e5440046b3fefb63b6b6e2ead7ebaf809/feature/utilcode/pkg/src/main/java/com/blankj/utilcode/pkg/feature/bar/BarActivity.kt#L17","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":13.0,"weighted_findings":4.0,"scanned_lines":63440.0,"category:correctness":13.0},"findings":[{"rule_id":"opengrep/java.lang.correctness.no-string-eqeq","severity":"medium","message":"Strings should not be compared with '=='. This is a reference comparison operator. Use '.equals()' instead.","path":"lib/utilcode/src/main/java/com/blankj/utilcode/util/BusUtils.java","line":331,"fingerprint":"java.lang.correctness.no-string-eqeq:lib/utilcode/src/main/java/com/blankj/utilcode/util/BusUtils.java:331"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"script/gitHelp.sh","line":14,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:script/gitHelp.sh:14"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"script/gitHelp.sh","line":18,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:script/gitHelp.sh:18"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"script/gitHelp.sh","line":20,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:script/gitHelp.sh:20"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"script/gitHelp.sh","line":22,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:script/gitHelp.sh:22"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"script/gitHelp.sh","line":22,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:script/gitHelp.sh:22"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"script/gitHelp.sh","line":24,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:script/gitHelp.sh:24"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"script/gitHelp.sh","line":26,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:script/gitHelp.sh:26"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"script/gitHelp.sh","line":26,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:script/gitHelp.sh:26"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"script/gitHelp.sh","line":39,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:script/gitHelp.sh:39"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"script/gitHelp.sh","line":42,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:script/gitHelp.sh:42"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"script/gitHelp.sh","line":44,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:script/gitHelp.sh:44"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"script/gitHelp.sh","line":44,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:script/gitHelp.sh:44"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":0.2429,"check:ci_present":1.0,"check:ci_runs_tests":0.0,"check:ci_runs_lint":0.0,"check:tests_cochange":1.0,"test_lines":7705.0,"source_lines":63440.0,"test_ratio":0.1215,"ci_files":1.0,"cochange_share":0.3158,"cochange_commits":209.0},"findings":[],"evidence":[{"kind":"ci","description":"CI config: .github/workflows/android.yml","ref":".github/workflows/android.yml","url":null,"weight":0.0}],"data":{"test_commands":[],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":0.0,"check:changelog":1.0,"readme_lines":47.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0},{"kind":"docs","description":"CHANGELOG.md","ref":"CHANGELOG.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null}],"flags":[]}