Package Health/org.bouncycastle:bcpkix-jdk15on

bcpkix-jdk15on

The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.5 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.

Latest 1.70org.bouncycastle

Maven

68%

Total Score

caution

An old release from an active project, with a license mismatch and all workflow actions unpinned.

Are you affected? Scan for Free

Health Score Breakdown

License

The artifact declares the Bouncy Castle Licence and the repository contains a recognized MIT license file; because the detected and declared license names do not match, license interpretation deserves attention.

Release history

Version 1.70 was released in December 2021, with no releases in the last 12 months; the linked repository is active, but this specific release is considerably stale.

Repo bus factor

One contributor made about 79% of recent commits, creating concentration risk, but 10 other contributors were active and the project is organization-owned.

Repo package mention

The repository name does not match this package and its README does not mention the package, so the linkage is less transparent even though it may be a normal component of a larger project.

Workflow audit

The single analyzed workflow had no untrusted checkout or injection findings and scopes permissions at job level, but all three action references are unpinned, weakening build reproducibility and supply-chain hygiene.