Every commit scored for change-risk against this repo's own history, so 'elevated' means elevated here rather than on some global curve.
Needs review
169 commits sit in this repo's top risk tercile, which is 34% of the 500scored. The cut is drawn against this codebase's own history rather than a global curve, so a quiet repo still fills its top band, and here it starts at 5.5 out of 10. What pushes a commit up is size and spread together: a large change confined to one area scores below a smaller one scattered across a dozen files.
Commit categories over time, read off the subject line. Fixes carry the accent because that is the series this chart exists to show.
Consistently other-driven across its history.
Ranked by change-risk, highest first. Priority is a tercile of this repo's own distribution, so a quiet repo still fills its top band.
| # | Commit | Author | When | Lines | Risk | Top driver |
|---|---|---|---|---|---|---|
| 1 | c4d86570SCEP - Encryption certificate | Jakub Konieczka | 10mo ago | +2.4K -256 | 100%Elevated | — |
| 2 | 83b4018cfeat: ECA-12986 refactor. Move request types into enum ref: ECA-12986 | Jekaterina Bunina | 1y ago | +2.8K -2.5K | 100%Elevated | — |
| 3 | cb332ca8ECA-13114: Add SLH-DSA support | Diego Lopez Reyes | 1y ago | +1.6K -14 | 99%Elevated | — |
| 4 | 49d85528ECA-12937: Added request-id for web services | Gustav Hallén | 1y ago | +1.1K -981 | 99%Elevated | — |
| 5 | 50664ba7ECA-12868: Fix RaMasterApiSystemTest | Lauri Kongas | 1y ago | +1.3K -3 | 99%Elevated | — |
| 6 | dcc669dcAllow separate keys in SCEP RA mode | Mark Wright | 9mo ago | +778 -494 | 99%Elevated | — |
| 7 | 0f04cbedMerge branch 'fb-ECA-13153-add-helm-readme' into 'main' | Andris Dobičinaitis | 1y ago | +645 -0 | 99%Elevated | — |
| 8 | 01923627ECA-12868: Implement Key Migration backend | Lauri Kongas | 1y ago | +520 -15 | 99%Elevated | — |
| 9 | 5a3ea3f3Resolve ECA-12818 "Fb mpic acme integration merge" | Andres Jakobs | 1y ago | +452 -21 | 98%Elevated | — |
| 10 | c0644aa0cherry pick 13442 | Lauri Kongas | 1y ago | +469 -110 | 98%Elevated | — |
| 11 | 8b5769b2feat: ECA-124756 enroll with end entity new rest endpoint ref: ECA-12475 | Jekaterina Bunina | 1y ago | +330 -28 | 98%Elevated | — |
| 12 | c278386cECA-12868: Set up key migration backend structure | Lauri Kongas | 1y ago | +315 -8 | 98%Elevated | — |
| 13 | 77671a42ECA-12866: Add REST endpoint for keyimport | Johanna Axner | 1y ago | +305 -0 | 98%Elevated | — |
| 14 | c1be6179ECA-13123: clean up after tests, configurable OCSP port | Tomas Gustavsson | 1y ago | +297 -302 | 97%Elevated | — |
| 15 | 5cfe7beafix: reverted .classpath and added missing configdump ignore | Mike Agrenius Kushner | 1y ago | +266 -266 | 97%Elevated | — |
| 16 | 9ca1938afix: reverting .classpath | Mike Agrenius Kushner | 1y ago | +266 -266 | 97%Elevated | — |
| 17 | 90b35d69ECA-13016: Allow key recovery to be possible after key import | Lauri Kongas | 1y ago | +298 -27 | 97%Elevated | — |
| 18 | 43d24813ECA-12837: ocsp system tests with mldsa CA | Tomas Gustavsson | 1y ago | +291 -241 | 97%Elevated | — |
| 19 | 54adc82eResolve ECA-11574 "Change key recovery encryption algorithm to rsa oaep instead of rsa pkcs1.5" | Parumita Saha | 1y ago | +297 -34 | 96%Elevated | — |
| 20 | 80af08c0ECA-13123: fix system tests that relies on other tests | Tomas Gustavsson | 1y ago | +268 -245 | 96%Elevated | — |
| 21 | 78153f9dfeat: ECA-12475 escape + and = in CVC mnemonic ref: ECA-12475 | Jekaterina Bunina | 1y ago | +294 -1 | 96%Elevated | — |
| 22 | e6a7e64eECA-12868: Add system tests | Lauri Kongas | 1y ago | +296 -0 | 96%Elevated | — |
| 23 | 2592378ffeat: added a CLI command to verify correct behavior | Mike Agrenius Kushner | 1y ago | +244 -0 | 95%Elevated | — |
| 24 | 56b3857bECA-13147: Changed date representation to long. Put back the radio buttons. | Gustav Hallén | 1y ago | +242 -82 | 95%Elevated | — |
| 25 | 4b1e6af9fix: Fixed upgrade logging without log4j appender | Mike Agrenius Kushner | 1y ago | +198 -93 | 95%Elevated | — |
| 26 | 2dfb7058ECA-9981: added system test | TaherUddin | 1y ago | +224 -27 | 95%Elevated | — |
| 27 | 279049b7cherry pick 13442 | Lauri Kongas | 1y ago | +236 -11 | 94%Elevated | — |
| 28 | c5202f70cherry pick from main for ECA-13432 | Amin Khorsandi | 1y ago | +195 -114 | 94%Elevated | — |
| 29 | 2637161ffeat: added option to have ocsp responder return an earlier chain | Mike Agrenius Kushner | 1y ago | +253 -7 | 94%Elevated | — |
| 30 | 584d03fbECA-13207: Added junit-tests and license info | Gustav Hallén | 1y ago | +211 -0 | 94%Elevated | — |
| 31 | e1fe7ce0ECA-13207: Removes all keys from ExtendedInformation that contains ___zzz_ | Gustav Hallén | 1y ago | +220 -12 | 94%Elevated | — |
| 32 | e536241afeat: ECA-12475 add more unit tests ref: ECA-12475 | Jekaterina Bunina | 1y ago | +201 -3 | 94%Elevated | — |
| 33 | 616ae862ECA-13147: Made the names uniform | Gustav Hallén | 1y ago | +191 -143 | 93%Elevated | — |
| 34 | 4aac3b86feat: made it possible to set date for KeepExpiredOnCrl | Mike Agrenius Kushner | 1y ago | +185 -8 | 93%Elevated | — |
| 35 | 4c172b7fECA-9981: added overwrite support for subjectDn, start time, end time and extensions | TaherUddin | 1y ago | +168 -8 | 93%Elevated | — |
| 36 | 2bdc85edECA-13212: Improve CA & CRL pages loading time | Diego Lopez Reyes | 1y ago | +160 -104 | 93%Elevated | — |
| 37 | 7400b7c4feat: ECA-12867 Remove general error | Serkan Ongan | 1y ago | +171 -252 | 93%Elevated | — |
| 38 | 3850d7f1ECA-13083: fix min password bits calculation | Tomas Gustavsson | 1y ago | +149 -126 | 93%Elevated | — |
| 39 | 0420d9edECA-13050: Added additional test cases to util classes | Henrik Sunmark | 1y ago | +159 -0 | 93%Elevated | — |
| 40 | 0059a653l10n(admin-gui): update full French (v9.3.7) | David Carella | 7mo ago | +135 -17 | 92%Elevated | — |
| 41 | f247ef9fECA-13858: Add unit test of self-renewal happy path and non-role CA | Samuel Lidén Borell | 10mo ago | +151 -5 | 92%Elevated | — |
| 42 | 60989f7bECA-12937: Changed RequestId setup in Admin Web module to use the dedicated filter. | Andris Dobičinaitis | 1y ago | +133 -136 | 92%Elevated | — |
| 43 | 57ab4278ECA-13453: Fix line endings in doc/howto/ejbcafirewall.sh | Samuel Lidén Borell | 9mo ago | +126 -126 | 91%Elevated | — |
| 44 | 6965ca9fECA-13969: fix test fail in configdump | Amin Khorsandi | 10mo ago | +130 -34 | 91%Elevated | — |
| 45 | 529b1a58DESKPRO-1089:OCSP for MS compatible sub CAs | Tanmoy Kundu | 1y ago | +121 -11 | 91%Elevated | — |
| 46 | 91c6db20ECA-12427: templatize hsm in helm, softhsm | Tanmoy Kundu | 1y ago | +113 -1 | 91%Elevated | — |
| 47 | 649c29b5ECA-14340: add altcacert parameter for import | Tomas Gustavsson | 7mo ago | +124 -43 | 90%Elevated | — |
| 48 | 6051fa35fix: upgraded deprecated references to StringUtils | Mike Agrenius Kushner | 10mo ago | +160 -148 | 90%Elevated | — |
| 49 | 1d39e1e5Backport 13075 | Johanna Axner | 1y ago | +133 -27 | 90%Elevated | — |
| 50 | fef918c4ECA-12937: Changed RequestId setup in RA Web module to use the dedicated filter. | Andris Dobičinaitis | 1y ago | +108 -107 | 90%Elevated | — |
Two views of the same model: where the cuts fall, and what commit shape lands you above them.
Every scored commit, binned on the raw 0 to 10 score rather than the percentile. Percentile ranks are uniform by construction, so that axis has no shape to draw. The dashed lines are the tercile cuts behind each row's priority pill.
The 200 most recent commits, on their own recency sample rather than the feed above: that defaults to risk-sorted, so reusing it would plot only the top tercile and call it the spread. Big and scattered is what the model penalises. Click a dot to open it.
Repowise tracks change history across 2,685 files in keyfactor/ejbca-ce. No file in the repository changed in the last 90 days. Every commit is scored for change risk from its size, spread and the history of the files it touches.
