Loading report…
← nittim
No deterministic issues found — not a clean bill of health. 14 dimensions remain unaudited. Run Audit for the verdict.
29 of 5725 files scanned (<1%) — this snapshot was truncated: this audit's size limit was reached, so some source was left unread.
Read 29 of 500 selected files — this repository's archive was too large to finish in one scan.
Two scanners read 29 of 5725 files, starting with the highest-priority ones: one for committed credentials, one for known vulnerabilities in your dependencies. Neither found anything. That is not a clean bill of health. These two checks cover a narrow slice of what decides whether software is ready to ship. All 14 dimensions — architecture, privacy, reliability, AI-generated-code risk and the rest — are unexamined here. Deep AI is the tier that issues a verdict. This scan does not.
1.70 — GHSA-4h8f-2wvx-gg5w, GHSA-8xfc-gm6g-vgpv, GHSA-hr8g-6v94-x4m9
Bouncy Castle Java Cryptography API vulnerable to DNS poisoning — MODERATE, declared range (not an installed version)
Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation. — MODERATE, declared range (not an installed version)
Bouncy Castle For Java LDAP injection vulnerability — MODERATE, declared range (not an installed version)
Security, privacy, reliability, AI-generated-code risk, 10 more: unaudited, not clean.
The free scan doesn't reason across these — unaudited, not safe. Opus 4.8 scores each, with evidence, impact, and a fix.
Scanned 29 of 5725 files (highest-priority subset) · OWASP-Benchmark/BenchmarkJava
Dependency manifests: 1 Maven/Gradle manifest read (declared versions, advisory).
[](https://nittim.com/library/OWASP-Benchmark/BenchmarkJava)