apache/httpcomponents-client

be07c7729757 (3 days ago) → ffe4a05f4faf (19 hours ago)

Measure	Before	After	Change
Readiness score	23	22	-1
Findings to address	61	58	-3
Key establishment	57	2	-55
Files scanned	1211	815	-396

Added

Present in the later scan and not in the earlier one.

Finding	Assessment	Before	After
RC4 Key material constructed for a named algorithm · `java.keyspec`	Already broken	0	3
DES Key material constructed for a named algorithm · `java.keyspec`	Already broken	0	1

Present in the earlier scan and gone in the later one.

Finding	Assessment	Before
SHA-1 Hash algorithm through the JCA · `java.messagedigest`	Already broken	2
PBKDF2 Password hashing or key derivation · `java.kdf`	Reduced margin	2
SHA-256 Classical public-key cipher through the JCA · `java.cipher`	Reduced margin	2
HMAC Message authentication code through the JCA · `java.mac`	Quantum-safe	2

The same finding, in a different number of places.

Finding	Assessment	Before	After
NTLM NTLM authentication · `java.ntlm`	Already broken	9	10
SHA-256 Hash algorithm through the JCA · `java.messagedigest`	Reduced margin	7	3
CSPRNG Random number generation · `java.rng`	Quantum-safe	7	4

11 findings appear in both scans, in the same number of places. Each scan's own report lists them.