OpenID

OpenID Foundation specifications and repositories

OpenID Foundation pageCollected data on GitHub

Nothing substantive in the OpenID track. The one item worth noting is openid/sharedsignals, which now has 1.1 draft documents copied from 1.0 with 1.0 retained; the other two commits are thin.

Updated 13 November at 06:50 UTC

What changed

Substantive change

OpenID4VCI's S2S work renames its identifiers and switches all JSON properties to snake_case.

Two commits landed on the default branch, both tagged [S2S]. One ratifies the identifier model, renaming session_id to wallet_id and credential_instance_id to credential_id (#762, #810). The other makes all JSON properties snake_case (#791, #809). Only commit titles are available, so the exact affected messages and any semantic change beyond renaming are not visible.

openid/OpenID4VCI: 2 new commits on the default branch

Who this affects
  • A wallet or issuer implementer building against the S2S draft needs to update field names such as session_id and credential_instance_id.
  • Anyone writing JSON schemas or test fixtures for the S2S messages must switch to snake_case property names.
Substantive change

Openid/dchp saw 23 commits of spec edits: a field rename, credential_types as an array, and mdoc and SD-JWT VC wording fixes.

Only the commit titles are available, and 8 of the 23 are not listed, so this is a partial picture. The titles show CredentialItem.format renamed to credential_format and the format annexes adapted to credential_types being an array. They also show the following. The wallet, not the mdoc, chooses issuer- or device-signed. A substitute data element may be returned where its definition allows. The mapping of support_no_cryptographic_binding to DocRequestInfo was dropped. SD-JWT VC path semantics were deferred to issue #52, and a KB-JWT suggestion was applied. The ISO 18013-5 Document type is no longer redefined as a byte string, the authority key identifier now uses the RFC 5280 name, and RFC 7515 was added as a normative reference. Several other commits are review fixes and housekeeping. Exact wire-format effects cannot be confirmed from titles alone.

openid/dchp: 23 new commits on the default branch

Who this affects
  • A wallet developer tracking dchp needs to update for the renamed credential_format field and the array-valued credential_types.
  • An implementer of mdoc responses needs to know that the wallet selects issuer- or device-signed data.
Minor or unclear changes (10)
Minor or unclear

One commit to openid/aauth that clarifies a signature key name; only the commit title is available.

openid/aauth: 1 new commit on the default branch

Read the explanation

A single commit, "clarify signature key name", landed on the default branch. The material gives only the commit title, with no diff, so what was renamed or clarified and whether wire behaviour changed cannot be determined.

Minor or unclear

Openid/federation-wallet merged PR #71 from branch tm1; the content is not shown.

openid/federation-wallet: 1 new commit on the default branch

Read the explanation

One merge commit, "Merge pull request #71 from openid/tm1", appeared. The material has no PR body or diff, so the substance of the change is unknown. The repository shows 1 open PR and 4 merged in the last 30 days.

Minor or unclear

Openid/sharedsignals created 1.1 draft documents from the 1.0 ones, keeping 1.0 intact.

openid/sharedsignals: 1 new commit on the default branch

Read the explanation

Commit #310, "Create 1.1 draft documents from 1.0, retaining 1.0", sets up a 1.1 line of the Shared Signals specification documents as copies of 1.0 while keeping the 1.0 documents. The material shows no diff, so it is unclear whether any normative text differs yet. The repository has 12 open PRs, which may be waiting on a 1.1 base.

  • A Shared Signals transmitter or receiver implementer can now track where 1.1 changes will be written, separate from the stable 1.0 text.
Minor or unclear

A merge of PR #800 (branch 718-age-over-nn) landed in OpenID4VP; the material has no diff, so the content is unknown.

openid/OpenID4VP: 1 new commit on the default branch

Read the explanation

One commit, 66f5ff931301, merged pull request #800 from the branch openid/718-age-over-nn into the default branch of openid/OpenID4VP. The branch name suggests a change related to age-over-NN claims, but the material contains only the merge commit title, with no diff or PR description, so the actual effect on the specification cannot be stated.

Minor or unclear

Openid/aauth trimmed its CONTRIBUTING file and changed how meeting notes are handled.

openid/aauth: 2 new commits on the default branch

Read the explanation

Two commits landed on the default branch. One trims CONTRIBUTING to essentials and describes meeting notes taken by an agent. The other drops the condition that OIDF approval is needed for meeting notes. Only commit titles are available, so details are unknown. No specification or protocol content is shown as changed.

Minor or unclear

The openid/aauth repo got working-group repo files and a meeting calendar, with no specification text.

openid/aauth: 3 new commits on the default branch

Read the explanation

Three commits add WG repo files and a meeting calendar, add a copy button for the calendar feed address, and change the README to link to the subscribe page. These are housekeeping changes only. No protocol content is visible in the commit titles.

Minor or unclear

Three PRs merged in claims-aggregation, covering a trust model, an RFC 9207 mix-up defense and general spec edits.

openid/claims-aggregation: 3 new commits on the default branch

Read the explanation

The commits are merges of PR #39 (spec-edits), #40 (claims-aggregation-trust-model) and #41 (rfc9207-mix-up-defense). Only branch names are available, with no diff or PR body, so the actual text changes are unknown. The branch names suggest a trust model section and use of RFC 9207 issuer identification against mix-up attacks.

Minor or unclear

Openid/claims-aggregation merged a contributor guide and made no spec change.

openid/claims-aggregation: 2 new commits on the default branch

Read the explanation

Two commits landed on the default branch since late June: a contribution guidance document (PR #42) and its merge commit. The commit messages show no change to protocol text.

Minor or unclear

Openid/authzen merged PR #801 (branch iana-rfc); the material doesn't show what it changed.

openid/authzen: 1 new commit on the default branch

Read the explanation

One merge commit (05dc553a8c44) landed on the default branch of openid/authzen: pull request #801 from the branch openid/iana-rfc. The material gives only the commit title, with no diff or PR body. The branch name hints at IANA registration or RFC-related work, but that is a guess, so the effect on the specification is unknown. The repository has 21 open PRs and 49 merged in the last 30 days.

Minor or unclear

A merge of PR #72 (branch openid/ralph) landed on openid/federation-wallet; the material doesn't say what it changed.

openid/federation-wallet: 1 new commit on the default branch

Read the explanation

The only material is one commit message, a merge of pull request #72 from the branch openid/ralph. No diff, PR description or file list is included, so the effect on the specification cannot be determined. The repository metadata shows 2 open PRs and 3 PRs merged in the last 30 days.

Full daily report for 2026-11-13

OpenID Radar Daily - 2026-11-13

Generated at: 2026-11-13T06:50:01+00:00

Snapshot

  • Public repositories: 66
  • Active (push <= 30 days): 13
  • Active (push <= 90 days): 20
  • Archived repositories: 20
  • Open PRs (org total): 195
  • Open issues (org total): 1605

Top Focus

Rank Repo Score Category Push Age Open PRs Open Issues Trend
1 openid/OpenID4VCI 12.00 digital-credentials 0d 5 132 up 1
2 openid/authzen 11.70 authzen 0d 22 72 down 1
3 openid/AppAuth-iOS 11.00 appauth 0d 52 14 same
4 openid/OpenID4VP 10.50 digital-credentials 0d 5 95 same
5 openid/fapi 10.00 other 1d 16 77 up 13
6 openid/publication 9.80 publication 9d 2 1 down 1
7 openid/claims-aggregation 9.00 other 2d 1 36 down 1
8 openid/dchp 9.00 other 2d 8 58 down 1
9 openid/AppAuth-JS 9.00 appauth 6d 11 3 down 1
10 openid/sharedsignals 8.40 sharedsignals 0d 12 52 down 1
11 openid/federation-entity-collection 8.00 federation 6d 1 2 down 1
12 openid/AppAuth-Android 7.70 appauth 235d 20 24 down 1

Deep Dive Candidates

  • openid/OpenID4VCI score=12.00 / open_prs=5 / open_issues=132 / days_since_push=0
  • openid/authzen score=11.70 / open_prs=22 / open_issues=72 / days_since_push=0
  • openid/AppAuth-iOS score=11.00 / open_prs=52 / open_issues=14 / days_since_push=0
  • openid/OpenID4VP score=10.50 / open_prs=5 / open_issues=95 / days_since_push=0
  • openid/fapi score=10.00 / open_prs=16 / open_issues=77 / days_since_push=1
  • openid/publication score=9.80 / open_prs=2 / open_issues=1 / days_since_push=9
  • openid/claims-aggregation score=9.00 / open_prs=1 / open_issues=36 / days_since_push=2
  • openid/dchp score=9.00 / open_prs=8 / open_issues=58 / days_since_push=2

Fresh Pushes (<= 3 days)

  • openid/fapi pushed_at=2026-11-12T02:26:30Z
  • openid/claims-aggregation pushed_at=2026-11-10T08:25:21Z
  • openid/dchp pushed_at=2026-11-10T08:18:10Z
  • openid/ipsie-openid-sl1 pushed_at=2026-11-12T05:18:47Z

Notes

  • Compared with previous snapshot: 2026-11-12
Weekly digest 2026-W46

OpenID Radar Weekly - 2026-W46

Window: 2026-11-03 to 2026-11-09 Generated at: 2026-11-09T17:52:50+00:00

Summary

  • Snapshot files in window: 7
  • Top list size per day: 12

Repositories Persistently in Top List

Repo Appearances Avg Score Latest Score Category
openid/OpenID4VCI 7 16.93 16.50 digital-credentials
openid/AppAuth-iOS 7 16.50 16.50 appauth
openid/authzen 7 15.79 13.00 authzen
openid/OpenID4VP 7 15.00 15.00 digital-credentials
openid/fapi 7 8.57 8.00 other
openid/sharedsignals 7 8.40 8.40 sharedsignals
openid/publication 6 12.60 12.60 publication
openid/ipsie-scim-al 6 8.00 8.00 ipsie
openid/ssf-wise-profile 6 8.00 8.00 other
openid/AppAuth-Android 6 7.70 7.70 appauth
openid/dchp 4 8.75 9.00 other
openid/federation-entity-collection 4 8.00 8.00 federation
openid/federation-wallet 4 7.00 7.00 federation
openid/OpenID4VC-HAIP 3 6.50 6.50 digital-credentials
openid/AppAuth-JS 2 9.00 9.00 appauth
openid/cg-australian-digital-trust 1 6.00 6.00 other

Recommended Deep Dive Queue

  • openid/OpenID4VCI (appearances=7, avg_score=16.93)
  • openid/AppAuth-iOS (appearances=7, avg_score=16.50)
  • openid/authzen (appearances=7, avg_score=15.79)
  • openid/OpenID4VP (appearances=7, avg_score=15.00)
  • openid/fapi (appearances=7, avg_score=8.57)