Dependency heatmap

Table view · 3D view

Maintenance observations and advisories for the package versions listed in this release's SBOMs.

This information was assembled by ATR from the distribution archives and has not yet been reviewed by Ant.

Analysed 2026-09-10 17:19 UTC. Download analysis JSON

How to read this report

Health (0–1) averages release recency, shared workload, active maintainers and project guidance using A-O's formula. Maintained (0–10) is OpenSSF Scorecard's check of commits and issue activity over 90 days. We show both because an active project can still rely on one person.

Criticality (0–1) estimates importance from ecosyste.ms popularity rankings: downloads, dependents, stars and forks.

Risk (0–1) is criticality × (1 − health). It highlights important packages with poor health.

Missing data stays unknown. Archived projects get Health 0.05. Advisories are separate from these scores.

Input SBOMs (6)

apache-ivy-2.6.0-bin-with-deps.tar.gz SBOM — 375 components, 363 file entries, 12 package versions.

Retrieved 2026-09-10T17:19:35.022515+00:00.

SHA-256: 17f67d42b6f3f9982a825520503b87eadda821becd20f2a6b967afb83b3accc6

apache-ivy-2.6.0-bin-with-deps.zip SBOM — 375 components, 363 file entries, 12 package versions.

Retrieved 2026-09-10T17:19:35.265018+00:00.

SHA-256: e5f5304b7914c8e1896f73b5fa29518c622a088f11c2f0fc40b5d43ce72f443a

apache-ivy-2.6.0-bin.tar.gz SBOM — 357 components, 345 file entries, 12 package versions.

Retrieved 2026-09-10T17:19:35.496462+00:00.

SHA-256: b25f2d412f943430eaace6950ee57b39d8ce6582a2a8cd0df0c6b698b5222d5e

apache-ivy-2.6.0-bin.zip SBOM — 357 components, 345 file entries, 12 package versions.

Retrieved 2026-09-10T17:19:35.611588+00:00.

SHA-256: 10b3cd0dc6950f53dddd17cc1682f8b8acb270decf020f58e2c40eedfdf8aac6

apache-ivy-2.6.0-src.tar.gz SBOM — 2473 components, 2473 file entries, 0 package versions.

Retrieved 2026-09-10T17:19:35.946432+00:00.

SHA-256: 60a289fe349128caf129581445da22d3a5038e26f3aaf267453a50084707da93

apache-ivy-2.6.0-src.zip SBOM — 2473 components, 2473 file entries, 0 package versions.

Retrieved 2026-09-10T17:19:36.229163+00:00.

SHA-256: 004c8b98105636524e877593add46496c8b92bdff8132615ddee7bd60cb81909

Loading analysis…

Credits and sources

Alpha-Omega maintenance heuristic, with missing inputs left unknown. Includes ecosyste.ms data under CC BY-SA 4.0 and deps.dev and OpenSSF Scorecard observations. ATR selected, normalised and combined records and calculated maintenance indicators. gitbox_mirror identifies an inferred Apache GitHub mirror, not verified repository identity.

Alpha-Omega heuristic · ecosyste.ms packages · ecosyste.ms repositories · ecosyste.ms issues · deps.dev and OpenSSF Scorecard · ecosyste.ms data licence · deps.dev terms

Last updated 11 Sep 2026 15:07 UTC.