{"id":18836002,"url":"https://github.com/stevespringett/owasp-risk-rating-calculator","last_synced_at":"2025-07-01T12:34:51.130Z","repository":{"id":37979285,"uuid":"168627644","full_name":"stevespringett/owasp-risk-rating-calculator","owner":"stevespringett","description":"A Java library for programmatically calculating OWASP Risk Rating scores","archived":false,"fork":false,"pushed_at":"2023-04-03T08:57:02.000Z","size":68,"stargazers_count":18,"open_issues_count":5,"forks_count":4,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-04-14T05:39:19.799Z","etag":null,"topics":["java","library","owasp","risk-assessment","risk-scores","threat-modeling"],"latest_commit_sha":null,"homepage":"https://www.owasp.org/index.php/OWASP_Risk_Rating_Methodology","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/stevespringett.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null}},"created_at":"2019-02-01T02:05:58.000Z","updated_at":"2023-12-24T06:15:10.000Z","dependencies_parsed_at":"2023-02-05T16:31:49.355Z","dependency_job_id":null,"html_url":"https://github.com/stevespringett/owasp-risk-rating-calculator","commit_stats":{"total_commits":43,"total_committers":4,"mean_commits":10.75,"dds":0.5581395348837209,"last_synced_commit":"bc8a1273911b416b349288e1046377bcaaa6fe44"},"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/stevespringett/owasp-risk-rating-calculator","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stevespringett%2Fowasp-risk-rating-calculator","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stevespringett%2Fowasp-risk-rating-calculator/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stevespringett%2Fowasp-risk-rating-calculator/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stevespringett%2Fowasp-risk-rating-calculator/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/stevespringett","download_url":"https://codeload.github.com/stevespringett/owasp-risk-rating-calculator/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stevespringett%2Fowasp-risk-rating-calculator/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":262963592,"owners_count":23391853,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["java","library","owasp","risk-assessment","risk-scores","threat-modeling"],"created_at":"2024-11-08T02:17:51.146Z","updated_at":"2025-07-01T12:34:50.648Z","avatar_url":"https://github.com/stevespringett.png","language":"Java","funding_links":[],"categories":["安全"],"sub_categories":["语音合成"],"readme":"[![Build Status](https://github.com/stevespringett/owasp-risk-rating-calculator/workflows/Maven%20CI/badge.svg)](https://github.com/stevespringett/owasp-risk-rating-calculator/actions?workflow=Maven+CI)\n[![Codacy Badge](https://api.codacy.com/project/badge/Grade/fe80f59eee334016b218178bc72e6395)](https://www.codacy.com/app/stevespringett/owasp-risk-rating-calculator?utm_source=github.com\u0026amp;utm_medium=referral\u0026amp;utm_content=stevespringett/owasp-risk-rating-calculator\u0026amp;utm_campaign=Badge_Grade)\n[![License](https://img.shields.io/badge/license-Apache%202.0-brightgreen.svg)][Apache 2.0]\n\nOWASP Risk Rating Calculator\n=====================================\n\nOWASP Risk Rating Calculator is a Java library for programmatically calculating OWASP Risk Rating scores.\n\nCompiling\n-------------------\n\n\u003e $ mvn clean package\n\nUsage Example\n-------------------\n```java\nOwaspRiskRating riskRating = new OwaspRiskRating()\n    .with(ThreatAgentFactor.SkillLevel.ADVANCED_COMPUTER_USER)\n    .with(ThreatAgentFactor.Motive.POSSIBLE_REWARD)\n    .with(ThreatAgentFactor.Opportunity.SOME_ACCESS_OR_RESOURCES_REQUIRED)\n    .with(ThreatAgentFactor.Size.AUTHENTICATED_USERS)\n    .with(VulnerabilityFactor.EaseOfDiscovery.DIFFICULT)\n    .with(VulnerabilityFactor.EaseOfExploit.THEORETICAL)\n    .with(VulnerabilityFactor.Awareness.HIDDEN)\n    .with(VulnerabilityFactor.IntrusionDetection.NOT_LOGGED)\n    .with(TechnicalImpactFactor.LossOfConfidentiality.ALL_DATA_DISCLOSED)\n    .with(TechnicalImpactFactor.LossOfIntegrity.EXTENSIVE_SERIOUSLY_CORRUPT_DATA)\n    .with(TechnicalImpactFactor.LossOfAvailability.MINIMAL_SECONDARY_SERVICES_INTERRUPTED)\n    .with(TechnicalImpactFactor.LossOfAccountability.COMPLETELY_ANONYMOUS)\n    .with(BusinessImpactFactor.FinancialDamage.SIGNIFICANT_EFFECT_ON_ANNUAL_PROFIT)\n    .with(BusinessImpactFactor.ReputationDamage.LOSS_OF_MAJOR_ACCOUNTS)\n    .with(BusinessImpactFactor.NonCompliance.HIGH_PROFILE_VIOLATION)\n    .with(BusinessImpactFactor.PrivacyViolation.MILLIONS_OF_PEOPLE);\n\nScore score = riskRating.calculateScore();\nLevel likelihood = score.getLikelihood();\nLevel technicalImpact = score.getTechnicalImpact();\nLevel businessImact = score.getBusinessImpact();\n```\n\nMaven Usage\n-------------------\nOWASP Risk Rating Calculator is available in the Maven Central Repository.\n\n```xml\n\u003cdependency\u003e\n    \u003cgroupId\u003eus.springett\u003c/groupId\u003e\n    \u003cartifactId\u003eowasp-risk-rating-calculator\u003c/artifactId\u003e\n    \u003cversion\u003e1.0.1\u003c/version\u003e\n\u003c/dependency\u003e\n```\n\nCopyright \u0026 License\n-------------------\n\nOWASP Risk Rating Calculator is Copyright (c) Steve Springett. All Rights Reserved.\n\nAll other trademarks are property of their respective owners.\n\nPermission to modify and redistribute is granted under the terms of the [Apache 2.0] license.\n\n  [Apache 2.0]: http://www.apache.org/licenses/LICENSE-2.0.txt\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fstevespringett%2Fowasp-risk-rating-calculator","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fstevespringett%2Fowasp-risk-rating-calculator","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fstevespringett%2Fowasp-risk-rating-calculator/lists"}