{"id":360492,"url":"https://github.com/aws/aws-lambda-java-libs","last_synced_at":"2026-06-21T15:02:01.347Z","repository":{"id":32269651,"uuid":"35844242","full_name":"aws/aws-lambda-java-libs","owner":"aws","description":"Official mirror for interface definitions and helper classes for Java code running on the AWS Lambda platform.","archived":false,"fork":false,"pushed_at":"2026-01-09T15:10:11.000Z","size":33709,"stargazers_count":545,"open_issues_count":66,"forks_count":241,"subscribers_count":50,"default_branch":"main","last_synced_at":"2026-01-12T00:25:09.114Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://aws.amazon.com/lambda/","language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-05-18T21:43:45.000Z","updated_at":"2026-01-09T15:09:48.000Z","dependencies_parsed_at":"2025-12-29T02:08:34.570Z","dependency_job_id":null,"html_url":"https://github.com/aws/aws-lambda-java-libs","commit_stats":{"total_commits":269,"total_committers":74,"mean_commits":3.635135135135135,"dds":0.8252788104089219,"last_synced_commit":"6538136ecaefa884d23a821c55ab48ca7deeaa3e"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-lambda-java-libs","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/sbom","scorecard":{"id":219413,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-lambda-java-libs","commit":"e54cf69b3751868b1adaf4824bb82744ed1fdfd1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.4,"checks":[{"name":"Maintained","score":10,"reason":"16 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/aws-lambda-java-profiler.yml:22","Info: jobLevel 'contents' permission set to 'read': .github/workflows/runtime-interface-client_merge_to_main.yml:28","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-core.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-events.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-log4j2.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-profiler.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-serialization.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/repo-sync.yml:1","Warn: no topLevel permission defined: .github/workflows/runtime-interface-client_merge_to_main.yml:1","Warn: no topLevel permission defined: .github/workflows/runtime-interface-client_pr.yml:1","Warn: no topLevel permission defined: .github/workflows/samples.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: experimental/aws-lambda-java-profiler/extension/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-core.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-core.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events-sdk-transformer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events-sdk-transformer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-log4j2.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-log4j2.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-log4j2.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-log4j2.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-serialization.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-serialization.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-serialization.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-serialization.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-tests.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-tests.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/samples.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/Dockerfile.glibc:1: pin your Docker image by updating public.ecr.aws/amazonlinux/amazonlinux:2 to public.ecr.aws/amazonlinux/amazonlinux:2@sha256:281cd59b0f58e009fd9165c26e05eafcf8523fa10651fe36f725b7f7e20b094a","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/Dockerfile.musl:1: pin your Docker image by updating public.ecr.aws/docker/library/alpine:3 to public.ecr.aws/docker/library/alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/deps/aws-lambda-cpp-0.2.7/examples/Dockerfile:1: pin your Docker image by updating alpine:latest to alpine:latest@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/codebuild-local/Dockerfile.agent:1: pin your Docker image by updating public.ecr.aws/amazoncorretto/amazoncorretto:8 to public.ecr.aws/amazoncorretto/amazoncorretto:8@sha256:8db090471159f79003debfd0821cef281523857a5804846a9fa644262ffcf7f7","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.alpine:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.amazoncorretto:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.amazonlinux:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.centos:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.debian:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.debian:12","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.ubuntu:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.ubuntu:13","Info:   0 out of  27 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  11 third-party GitHubAction dependencies pinned","Info:   0 out of  12 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"21 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-c28r-hw5m-5gv3","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-9vjp-v76f-g363","Warn: Project is vulnerable to: GHSA-grg4-wf29-r9vv","Warn: Project is vulnerable to: GHSA-269q-hmxg-m83q","Warn: Project is vulnerable to: GHSA-5jpm-x58v-624v","Warn: Project is vulnerable to: GHSA-5mcr-gq6c-3hq2","Warn: Project is vulnerable to: GHSA-wx5j-54mm-rqqq","Warn: Project is vulnerable to: GHSA-f256-j965-7f32","Warn: Project is vulnerable to: GHSA-wm47-8v5p-wjpj","Warn: Project is vulnerable to: GHSA-xpw8-rcwv-8f8p","Warn: Project is vulnerable to: GHSA-389x-839f-4rhx","Warn: Project is vulnerable to: GHSA-xq3w-v528-46rv","Warn: Project is vulnerable to: GHSA-6mjq-h674-j845","Warn: Project is vulnerable to: GHSA-264p-99wq-f4j6"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T02:12:02.151Z","repository_id":32269651,"created_at":"2025-08-17T02:12:02.152Z","updated_at":"2025-08-17T02:12:02.152Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28337611,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-12T06:09:07.588Z","status":"ssl_error","status_checked_at":"2026-01-12T06:05:18.301Z","response_time":98,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"packages":[{"id":4945980,"name":"org.lambdify:aws-lambda-java-events","ecosystem":"maven","description":"Event interface definitions AWS services supported by AWS Lambda.","homepage":"https://aws.amazon.com/lambda/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-lambda-java-libs","keywords_array":[],"namespace":"org.lambdify","versions_count":1,"first_release_published_at":"2018-05-22T19:34:38.000Z","latest_release_published_at":"2018-05-22T19:34:38.000Z","latest_release_number":"2.1.0","last_synced_at":"2026-01-11T04:36:32.410Z","created_at":"2022-07-27T05:14:16.440Z","updated_at":"2026-01-11T04:36:32.410Z","registry_url":"https://central.sonatype.com/artifact/org.lambdify/aws-lambda-java-events/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.lambdify/aws-lambda-java-events/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"],"distribution_repositories":["https://oss.sonatype.org/service/local/staging/deploy/maven2/"]},"repo_metadata":{"id":32269651,"uuid":"35844242","full_name":"aws/aws-lambda-java-libs","owner":"aws","description":"Official mirror for interface definitions and helper classes for Java code running on the AWS Lambda platform.","archived":false,"fork":false,"pushed_at":"2025-09-09T12:42:49.000Z","size":32820,"stargazers_count":542,"open_issues_count":61,"forks_count":238,"subscribers_count":54,"default_branch":"main","last_synced_at":"2025-09-12T22:18:41.898Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://aws.amazon.com/lambda/","language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-05-18T21:43:45.000Z","updated_at":"2025-09-09T12:42:53.000Z","dependencies_parsed_at":"2024-06-11T16:15:40.034Z","dependency_job_id":"02babb69-cd15-4182-a04c-43eecdf306e9","html_url":"https://github.com/aws/aws-lambda-java-libs","commit_stats":{"total_commits":269,"total_committers":74,"mean_commits":3.635135135135135,"dds":0.8252788104089219,"last_synced_commit":"6538136ecaefa884d23a821c55ab48ca7deeaa3e"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-lambda-java-libs","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/sbom","scorecard":{"id":219413,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-lambda-java-libs","commit":"e54cf69b3751868b1adaf4824bb82744ed1fdfd1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.4,"checks":[{"name":"Maintained","score":10,"reason":"16 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/aws-lambda-java-profiler.yml:22","Info: jobLevel 'contents' permission set to 'read': .github/workflows/runtime-interface-client_merge_to_main.yml:28","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-core.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-events.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-log4j2.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-profiler.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-serialization.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/repo-sync.yml:1","Warn: no topLevel permission defined: .github/workflows/runtime-interface-client_merge_to_main.yml:1","Warn: no topLevel permission defined: .github/workflows/runtime-interface-client_pr.yml:1","Warn: no topLevel permission defined: .github/workflows/samples.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: experimental/aws-lambda-java-profiler/extension/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-core.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-core.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events-sdk-transformer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events-sdk-transformer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-log4j2.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-log4j2.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-log4j2.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-log4j2.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-serialization.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-serialization.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-serialization.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-serialization.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-tests.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-tests.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/samples.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/Dockerfile.glibc:1: pin your Docker image by updating public.ecr.aws/amazonlinux/amazonlinux:2 to public.ecr.aws/amazonlinux/amazonlinux:2@sha256:281cd59b0f58e009fd9165c26e05eafcf8523fa10651fe36f725b7f7e20b094a","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/Dockerfile.musl:1: pin your Docker image by updating public.ecr.aws/docker/library/alpine:3 to public.ecr.aws/docker/library/alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/deps/aws-lambda-cpp-0.2.7/examples/Dockerfile:1: pin your Docker image by updating alpine:latest to alpine:latest@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/codebuild-local/Dockerfile.agent:1: pin your Docker image by updating public.ecr.aws/amazoncorretto/amazoncorretto:8 to public.ecr.aws/amazoncorretto/amazoncorretto:8@sha256:8db090471159f79003debfd0821cef281523857a5804846a9fa644262ffcf7f7","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.alpine:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.amazoncorretto:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.amazonlinux:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.centos:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.debian:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.debian:12","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.ubuntu:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.ubuntu:13","Info:   0 out of  27 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  11 third-party GitHubAction dependencies pinned","Info:   0 out of  12 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"21 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-c28r-hw5m-5gv3","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-9vjp-v76f-g363","Warn: Project is vulnerable to: GHSA-grg4-wf29-r9vv","Warn: Project is vulnerable to: GHSA-269q-hmxg-m83q","Warn: Project is vulnerable to: GHSA-5jpm-x58v-624v","Warn: Project is vulnerable to: GHSA-5mcr-gq6c-3hq2","Warn: Project is vulnerable to: GHSA-wx5j-54mm-rqqq","Warn: Project is vulnerable to: GHSA-f256-j965-7f32","Warn: Project is vulnerable to: GHSA-wm47-8v5p-wjpj","Warn: Project is vulnerable to: GHSA-xpw8-rcwv-8f8p","Warn: Project is vulnerable to: GHSA-389x-839f-4rhx","Warn: Project is vulnerable to: GHSA-xq3w-v528-46rv","Warn: Project is vulnerable to: GHSA-6mjq-h674-j845","Warn: Project is vulnerable to: GHSA-264p-99wq-f4j6"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T02:12:02.151Z","repository_id":32269651,"created_at":"2025-08-17T02:12:02.152Z","updated_at":"2025-08-17T02:12:02.152Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":275685794,"owners_count":25509540,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-17T02:00:09.119Z","response_time":84,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":509,"last_synced_at":"2025-09-29T21:05:45.824Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":236227,"followers":13171,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2025-09-29T21:05:45.824Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[{"name":"profiler-extension-0.1.1","sha":"e8d88b00270f94838a9876f290d0af70b46b73e6","kind":"commit","published_at":"2025-03-31T14:01:36.000Z","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/profiler-extension-0.1.1","html_url":"https://github.com/aws/aws-lambda-java-libs/releases/tag/profiler-extension-0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-lambda-java-libs@profiler-extension-0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/profiler-extension-0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/profiler-extension-0.1.1/manifests"},{"name":"profiler-extension-0.1.0","sha":"dfb89116693b63750dbecec3c17809f029f856ae","kind":"commit","published_at":"2025-03-24T14:37:50.000Z","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/profiler-extension-0.1.0","html_url":"https://github.com/aws/aws-lambda-java-libs/releases/tag/profiler-extension-0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-lambda-java-libs@profiler-extension-0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/profiler-extension-0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/profiler-extension-0.1.0/manifests"},{"name":"run-integration-tests","sha":"928b71e2963bcb8b4d74bc017904dd39b4cc9b40","kind":"commit","published_at":"2024-08-23T09:39:20.000Z","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/run-integration-tests","html_url":"https://github.com/aws/aws-lambda-java-libs/releases/tag/run-integration-tests","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-lambda-java-libs@run-integration-tests","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/run-integration-tests","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/run-integration-tests/manifests"}]},"repo_metadata_updated_at":"2025-10-12T23:46:19.384Z","dependent_packages_count":3,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":16.90359006667295,"stargazers_count":null,"forks_count":null,"average":24.44176700381017},"purl":"pkg:maven/org.lambdify/aws-lambda-java-events","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.lambdify:aws-lambda-java-events","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.lambdify:aws-lambda-java-events","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.lambdify:aws-lambda-java-events/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-10T01:40:07.205Z","issues_count":74,"pull_requests_count":222,"avg_time_to_close_issue":29306152.94736842,"avg_time_to_close_pull_request":3045921.0054347827,"issues_closed_count":38,"pull_requests_closed_count":183,"pull_request_authors_count":53,"issue_authors_count":69,"avg_comments_per_issue":3.5405405405405403,"avg_comments_per_pull_request":0.8108108108108109,"merged_pull_requests_count":152,"bot_issues_count":0,"bot_pull_requests_count":15,"past_year_issues_count":15,"past_year_pull_requests_count":59,"past_year_avg_time_to_close_issue":3191127.75,"past_year_avg_time_to_close_pull_request":305823.975,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":13,"past_year_avg_comments_per_issue":0.4,"past_year_avg_comments_per_pull_request":0.3220338983050847,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":37,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/issues","maintainers":[{"login":"msailes","count":27,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/msailes"},{"login":"dtorok","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dtorok"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.lambdify:aws-lambda-java-events/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.lambdify:aws-lambda-java-events/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.lambdify:aws-lambda-java-events/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.lambdify:aws-lambda-java-events/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.lambdify:aws-lambda-java-events/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":578407,"maintainers_count":0,"namespaces_count":76765,"keywords_count":35314,"github":"maven-central","metadata":{"funded_packages_count":38921},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-01-14T06:46:29.907Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4773824,"name":"com.amazonaws:aws-lambda-java-log4j2","ecosystem":"maven","description":"Support for using Log4j 2.x with AWS Lambda.","homepage":"https://aws.amazon.com/lambda/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-lambda-java-libs","keywords_array":[],"namespace":"com.amazonaws","versions_count":9,"first_release_published_at":"2017-06-29T23:35:22.000Z","latest_release_published_at":"2023-11-03T13:12:42.000Z","latest_release_number":"1.6.0","last_synced_at":"2024-11-25T20:13:13.155Z","created_at":"2022-07-26T07:57:26.016Z","updated_at":"2025-10-12T23:46:49.997Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-lambda-java-log4j2/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-lambda-java-log4j2/","metadata":{},"repo_metadata":{"id":32269651,"uuid":"35844242","full_name":"aws/aws-lambda-java-libs","owner":"aws","description":"Official mirror for interface definitions and helper classes for Java code running on the AWS Lambda platform.","archived":false,"fork":false,"pushed_at":"2025-09-09T12:42:49.000Z","size":32820,"stargazers_count":542,"open_issues_count":61,"forks_count":238,"subscribers_count":54,"default_branch":"main","last_synced_at":"2025-09-12T22:18:41.898Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://aws.amazon.com/lambda/","language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-05-18T21:43:45.000Z","updated_at":"2025-09-09T12:42:53.000Z","dependencies_parsed_at":"2024-06-11T16:15:40.034Z","dependency_job_id":"02babb69-cd15-4182-a04c-43eecdf306e9","html_url":"https://github.com/aws/aws-lambda-java-libs","commit_stats":{"total_commits":269,"total_committers":74,"mean_commits":3.635135135135135,"dds":0.8252788104089219,"last_synced_commit":"6538136ecaefa884d23a821c55ab48ca7deeaa3e"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-lambda-java-libs","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/sbom","scorecard":{"id":219413,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-lambda-java-libs","commit":"e54cf69b3751868b1adaf4824bb82744ed1fdfd1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.4,"checks":[{"name":"Maintained","score":10,"reason":"16 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/aws-lambda-java-profiler.yml:22","Info: jobLevel 'contents' permission set to 'read': .github/workflows/runtime-interface-client_merge_to_main.yml:28","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-core.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-events.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-log4j2.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-profiler.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-serialization.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/repo-sync.yml:1","Warn: no topLevel permission defined: .github/workflows/runtime-interface-client_merge_to_main.yml:1","Warn: no topLevel permission defined: .github/workflows/runtime-interface-client_pr.yml:1","Warn: no topLevel permission defined: .github/workflows/samples.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: experimental/aws-lambda-java-profiler/extension/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-core.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-core.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events-sdk-transformer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events-sdk-transformer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-log4j2.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-log4j2.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-log4j2.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-log4j2.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-serialization.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-serialization.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-serialization.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-serialization.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-tests.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-tests.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/samples.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/Dockerfile.glibc:1: pin your Docker image by updating public.ecr.aws/amazonlinux/amazonlinux:2 to public.ecr.aws/amazonlinux/amazonlinux:2@sha256:281cd59b0f58e009fd9165c26e05eafcf8523fa10651fe36f725b7f7e20b094a","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/Dockerfile.musl:1: pin your Docker image by updating public.ecr.aws/docker/library/alpine:3 to public.ecr.aws/docker/library/alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/deps/aws-lambda-cpp-0.2.7/examples/Dockerfile:1: pin your Docker image by updating alpine:latest to alpine:latest@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/codebuild-local/Dockerfile.agent:1: pin your Docker image by updating public.ecr.aws/amazoncorretto/amazoncorretto:8 to public.ecr.aws/amazoncorretto/amazoncorretto:8@sha256:8db090471159f79003debfd0821cef281523857a5804846a9fa644262ffcf7f7","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.alpine:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.amazoncorretto:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.amazonlinux:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.centos:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.debian:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.debian:12","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.ubuntu:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.ubuntu:13","Info:   0 out of  27 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  11 third-party GitHubAction dependencies pinned","Info:   0 out of  12 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"21 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-c28r-hw5m-5gv3","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-9vjp-v76f-g363","Warn: Project is vulnerable to: GHSA-grg4-wf29-r9vv","Warn: Project is vulnerable to: GHSA-269q-hmxg-m83q","Warn: Project is vulnerable to: GHSA-5jpm-x58v-624v","Warn: Project is vulnerable to: GHSA-5mcr-gq6c-3hq2","Warn: Project is vulnerable to: GHSA-wx5j-54mm-rqqq","Warn: Project is vulnerable to: GHSA-f256-j965-7f32","Warn: Project is vulnerable to: GHSA-wm47-8v5p-wjpj","Warn: Project is vulnerable to: GHSA-xpw8-rcwv-8f8p","Warn: Project is vulnerable to: GHSA-389x-839f-4rhx","Warn: Project is vulnerable to: GHSA-xq3w-v528-46rv","Warn: Project is vulnerable to: GHSA-6mjq-h674-j845","Warn: Project is vulnerable to: GHSA-264p-99wq-f4j6"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T02:12:02.151Z","repository_id":32269651,"created_at":"2025-08-17T02:12:02.152Z","updated_at":"2025-08-17T02:12:02.152Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":275685794,"owners_count":25509540,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-17T02:00:09.119Z","response_time":84,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":509,"last_synced_at":"2025-09-29T21:05:45.824Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":236227,"followers":13171,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2025-09-29T21:05:45.824Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-12T23:46:49.997Z","dependent_packages_count":47,"downloads":null,"downloads_period":null,"dependent_repos_count":719,"rankings":{"downloads":null,"dependent_repos_count":0.47307044962731426,"dependent_packages_count":1.4075899655365873,"stargazers_count":16.17896930351847,"forks_count":13.54251823354973,"docker_downloads_count":2.6172156768453956,"average":6.843872725815499},"purl":"pkg:maven/com.amazonaws/aws-lambda-java-log4j2","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-lambda-java-log4j2","docker_dependents_count":39,"docker_downloads_count":1582036,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-lambda-java-log4j2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-lambda-java-log4j2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-10T01:40:07.205Z","issues_count":74,"pull_requests_count":222,"avg_time_to_close_issue":29306152.94736842,"avg_time_to_close_pull_request":3045921.0054347827,"issues_closed_count":38,"pull_requests_closed_count":183,"pull_request_authors_count":53,"issue_authors_count":69,"avg_comments_per_issue":3.5405405405405403,"avg_comments_per_pull_request":0.8108108108108109,"merged_pull_requests_count":152,"bot_issues_count":0,"bot_pull_requests_count":15,"past_year_issues_count":15,"past_year_pull_requests_count":59,"past_year_avg_time_to_close_issue":3191127.75,"past_year_avg_time_to_close_pull_request":305823.975,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":13,"past_year_avg_comments_per_issue":0.4,"past_year_avg_comments_per_pull_request":0.3220338983050847,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":37,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/issues","maintainers":[{"login":"msailes","count":27,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/msailes"},{"login":"dtorok","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dtorok"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-log4j2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-log4j2/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-log4j2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-log4j2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-log4j2/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":578407,"maintainers_count":0,"namespaces_count":76765,"keywords_count":35314,"github":"maven-central","metadata":{"funded_packages_count":38921},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-01-14T06:46:29.907Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4652967,"name":"com.amazonaws:aws-lambda-java-serialization","ecosystem":"maven","description":"Serialization logic for the AWS Lambda Java Runtime","homepage":"https://aws.amazon.com/lambda/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-lambda-java-libs","keywords_array":[],"namespace":"com.amazonaws","versions_count":11,"first_release_published_at":"2020-12-01T17:49:31.000Z","latest_release_published_at":"2026-01-06T15:46:38.000Z","latest_release_number":"1.2.0","last_synced_at":"2026-01-11T04:36:46.962Z","created_at":"2022-07-25T16:39:25.102Z","updated_at":"2026-01-11T04:36:46.962Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-lambda-java-serialization/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-lambda-java-serialization/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":32269651,"uuid":"35844242","full_name":"aws/aws-lambda-java-libs","owner":"aws","description":"Official mirror for interface definitions and helper classes for Java code running on the AWS Lambda platform.","archived":false,"fork":false,"pushed_at":"2025-09-09T12:42:49.000Z","size":32820,"stargazers_count":542,"open_issues_count":61,"forks_count":238,"subscribers_count":54,"default_branch":"main","last_synced_at":"2025-09-12T22:18:41.898Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://aws.amazon.com/lambda/","language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-05-18T21:43:45.000Z","updated_at":"2025-09-09T12:42:53.000Z","dependencies_parsed_at":"2024-06-11T16:15:40.034Z","dependency_job_id":"02babb69-cd15-4182-a04c-43eecdf306e9","html_url":"https://github.com/aws/aws-lambda-java-libs","commit_stats":{"total_commits":269,"total_committers":74,"mean_commits":3.635135135135135,"dds":0.8252788104089219,"last_synced_commit":"6538136ecaefa884d23a821c55ab48ca7deeaa3e"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-lambda-java-libs","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/sbom","scorecard":{"id":219413,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-lambda-java-libs","commit":"e54cf69b3751868b1adaf4824bb82744ed1fdfd1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.4,"checks":[{"name":"Maintained","score":10,"reason":"16 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/aws-lambda-java-profiler.yml:22","Info: jobLevel 'contents' permission set to 'read': .github/workflows/runtime-interface-client_merge_to_main.yml:28","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-core.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-events.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-log4j2.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-profiler.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-serialization.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/repo-sync.yml:1","Warn: no topLevel permission defined: .github/workflows/runtime-interface-client_merge_to_main.yml:1","Warn: no topLevel permission defined: .github/workflows/runtime-interface-client_pr.yml:1","Warn: no topLevel permission defined: .github/workflows/samples.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: experimental/aws-lambda-java-profiler/extension/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-core.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-core.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events-sdk-transformer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events-sdk-transformer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-log4j2.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-log4j2.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-log4j2.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-log4j2.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-serialization.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-serialization.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-serialization.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-serialization.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-tests.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-tests.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/samples.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/Dockerfile.glibc:1: pin your Docker image by updating public.ecr.aws/amazonlinux/amazonlinux:2 to public.ecr.aws/amazonlinux/amazonlinux:2@sha256:281cd59b0f58e009fd9165c26e05eafcf8523fa10651fe36f725b7f7e20b094a","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/Dockerfile.musl:1: pin your Docker image by updating public.ecr.aws/docker/library/alpine:3 to public.ecr.aws/docker/library/alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/deps/aws-lambda-cpp-0.2.7/examples/Dockerfile:1: pin your Docker image by updating alpine:latest to alpine:latest@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/codebuild-local/Dockerfile.agent:1: pin your Docker image by updating public.ecr.aws/amazoncorretto/amazoncorretto:8 to public.ecr.aws/amazoncorretto/amazoncorretto:8@sha256:8db090471159f79003debfd0821cef281523857a5804846a9fa644262ffcf7f7","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.alpine:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.amazoncorretto:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.amazonlinux:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.centos:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.debian:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.debian:12","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.ubuntu:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.ubuntu:13","Info:   0 out of  27 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  11 third-party GitHubAction dependencies pinned","Info:   0 out of  12 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"21 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-c28r-hw5m-5gv3","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-9vjp-v76f-g363","Warn: Project is vulnerable to: GHSA-grg4-wf29-r9vv","Warn: Project is vulnerable to: GHSA-269q-hmxg-m83q","Warn: Project is vulnerable to: GHSA-5jpm-x58v-624v","Warn: Project is vulnerable to: GHSA-5mcr-gq6c-3hq2","Warn: Project is vulnerable to: GHSA-wx5j-54mm-rqqq","Warn: Project is vulnerable to: GHSA-f256-j965-7f32","Warn: Project is vulnerable to: GHSA-wm47-8v5p-wjpj","Warn: Project is vulnerable to: GHSA-xpw8-rcwv-8f8p","Warn: Project is vulnerable to: GHSA-389x-839f-4rhx","Warn: Project is vulnerable to: GHSA-xq3w-v528-46rv","Warn: Project is vulnerable to: GHSA-6mjq-h674-j845","Warn: Project is vulnerable to: GHSA-264p-99wq-f4j6"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T02:12:02.151Z","repository_id":32269651,"created_at":"2025-08-17T02:12:02.152Z","updated_at":"2025-08-17T02:12:02.152Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":275685794,"owners_count":25509540,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-17T02:00:09.119Z","response_time":84,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":509,"last_synced_at":"2025-09-29T21:05:45.824Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":236227,"followers":13171,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2025-09-29T21:05:45.824Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[{"name":"profiler-extension-0.1.1","sha":"e8d88b00270f94838a9876f290d0af70b46b73e6","kind":"commit","published_at":"2025-03-31T14:01:36.000Z","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/profiler-extension-0.1.1","html_url":"https://github.com/aws/aws-lambda-java-libs/releases/tag/profiler-extension-0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-lambda-java-libs@profiler-extension-0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/profiler-extension-0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/profiler-extension-0.1.1/manifests"},{"name":"profiler-extension-0.1.0","sha":"dfb89116693b63750dbecec3c17809f029f856ae","kind":"commit","published_at":"2025-03-24T14:37:50.000Z","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/profiler-extension-0.1.0","html_url":"https://github.com/aws/aws-lambda-java-libs/releases/tag/profiler-extension-0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-lambda-java-libs@profiler-extension-0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/profiler-extension-0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/profiler-extension-0.1.0/manifests"},{"name":"run-integration-tests","sha":"928b71e2963bcb8b4d74bc017904dd39b4cc9b40","kind":"commit","published_at":"2024-08-23T09:39:20.000Z","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/run-integration-tests","html_url":"https://github.com/aws/aws-lambda-java-libs/releases/tag/run-integration-tests","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-lambda-java-libs@run-integration-tests","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/run-integration-tests","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/run-integration-tests/manifests"}]},"repo_metadata_updated_at":"2025-10-12T23:46:59.928Z","dependent_packages_count":15,"downloads":null,"downloads_period":null,"dependent_repos_count":24,"rankings":{"downloads":null,"dependent_repos_count":4.770177125911677,"dependent_packages_count":5.47347118698405,"stargazers_count":16.17896930351847,"forks_count":13.54251823354973,"docker_downloads_count":null,"average":9.991283962490982},"purl":"pkg:maven/com.amazonaws/aws-lambda-java-serialization","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-lambda-java-serialization","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-lambda-java-serialization","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-lambda-java-serialization/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-10T01:40:07.205Z","issues_count":74,"pull_requests_count":222,"avg_time_to_close_issue":29306152.94736842,"avg_time_to_close_pull_request":3045921.0054347827,"issues_closed_count":38,"pull_requests_closed_count":183,"pull_request_authors_count":53,"issue_authors_count":69,"avg_comments_per_issue":3.5405405405405403,"avg_comments_per_pull_request":0.8108108108108109,"merged_pull_requests_count":152,"bot_issues_count":0,"bot_pull_requests_count":15,"past_year_issues_count":15,"past_year_pull_requests_count":59,"past_year_avg_time_to_close_issue":3191127.75,"past_year_avg_time_to_close_pull_request":305823.975,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":13,"past_year_avg_comments_per_issue":0.4,"past_year_avg_comments_per_pull_request":0.3220338983050847,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":37,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/issues","maintainers":[{"login":"msailes","count":27,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/msailes"},{"login":"dtorok","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dtorok"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-serialization/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-serialization/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-serialization/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-serialization/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-serialization/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":578407,"maintainers_count":0,"namespaces_count":76765,"keywords_count":35314,"github":"maven-central","metadata":{"funded_packages_count":38921},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-01-14T06:46:29.907Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4652982,"name":"com.amazonaws:aws-lambda-java-events-sdk-transformer","ecosystem":"maven","description":"Provides helper classes/methods to use alongside aws-lambda-java-events in order to transform Lambda input event model objects into SDK-compatible output model objects (eg. DynamodbEvent to a List of records writable back to DynamoDB through the AWS DynamoDB SDK for Java v1 or v2)","homepage":"https://aws.amazon.com/lambda/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-lambda-java-libs","keywords_array":[],"namespace":"com.amazonaws","versions_count":20,"first_release_published_at":"2020-05-05T13:51:29.000Z","latest_release_published_at":"2025-07-19T09:28:27.000Z","latest_release_number":"3.1.1","last_synced_at":"2026-01-11T04:36:36.717Z","created_at":"2022-07-25T16:39:32.803Z","updated_at":"2026-01-11T04:36:36.717Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-lambda-java-events-sdk-transformer/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-lambda-java-events-sdk-transformer/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"],"distribution_repositories":["https://oss.sonatype.org/service/local/staging/deploy/maven2/"]},"repo_metadata":{"id":32269651,"uuid":"35844242","full_name":"aws/aws-lambda-java-libs","owner":"aws","description":"Official mirror for interface definitions and helper classes for Java code running on the AWS Lambda platform.","archived":false,"fork":false,"pushed_at":"2025-09-09T12:42:49.000Z","size":32820,"stargazers_count":542,"open_issues_count":61,"forks_count":238,"subscribers_count":54,"default_branch":"main","last_synced_at":"2025-09-12T22:18:41.898Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://aws.amazon.com/lambda/","language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-05-18T21:43:45.000Z","updated_at":"2025-09-09T12:42:53.000Z","dependencies_parsed_at":"2024-06-11T16:15:40.034Z","dependency_job_id":"02babb69-cd15-4182-a04c-43eecdf306e9","html_url":"https://github.com/aws/aws-lambda-java-libs","commit_stats":{"total_commits":269,"total_committers":74,"mean_commits":3.635135135135135,"dds":0.8252788104089219,"last_synced_commit":"6538136ecaefa884d23a821c55ab48ca7deeaa3e"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-lambda-java-libs","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/sbom","scorecard":{"id":219413,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-lambda-java-libs","commit":"e54cf69b3751868b1adaf4824bb82744ed1fdfd1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.4,"checks":[{"name":"Maintained","score":10,"reason":"16 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/aws-lambda-java-profiler.yml:22","Info: jobLevel 'contents' permission set to 'read': .github/workflows/runtime-interface-client_merge_to_main.yml:28","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-core.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-events.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-log4j2.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-profiler.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-serialization.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/repo-sync.yml:1","Warn: no topLevel permission defined: .github/workflows/runtime-interface-client_merge_to_main.yml:1","Warn: no topLevel permission defined: .github/workflows/runtime-interface-client_pr.yml:1","Warn: no topLevel permission defined: .github/workflows/samples.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: experimental/aws-lambda-java-profiler/extension/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-core.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-core.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events-sdk-transformer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events-sdk-transformer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-log4j2.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-log4j2.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-log4j2.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-log4j2.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-serialization.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-serialization.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-serialization.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-serialization.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-tests.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-tests.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/samples.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/Dockerfile.glibc:1: pin your Docker image by updating public.ecr.aws/amazonlinux/amazonlinux:2 to public.ecr.aws/amazonlinux/amazonlinux:2@sha256:281cd59b0f58e009fd9165c26e05eafcf8523fa10651fe36f725b7f7e20b094a","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/Dockerfile.musl:1: pin your Docker image by updating public.ecr.aws/docker/library/alpine:3 to public.ecr.aws/docker/library/alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/deps/aws-lambda-cpp-0.2.7/examples/Dockerfile:1: pin your Docker image by updating alpine:latest to alpine:latest@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/codebuild-local/Dockerfile.agent:1: pin your Docker image by updating public.ecr.aws/amazoncorretto/amazoncorretto:8 to public.ecr.aws/amazoncorretto/amazoncorretto:8@sha256:8db090471159f79003debfd0821cef281523857a5804846a9fa644262ffcf7f7","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.alpine:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.amazoncorretto:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.amazonlinux:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.centos:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.debian:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.debian:12","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.ubuntu:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.ubuntu:13","Info:   0 out of  27 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  11 third-party GitHubAction dependencies pinned","Info:   0 out of  12 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"21 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-c28r-hw5m-5gv3","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-9vjp-v76f-g363","Warn: Project is vulnerable to: GHSA-grg4-wf29-r9vv","Warn: Project is vulnerable to: GHSA-269q-hmxg-m83q","Warn: Project is vulnerable to: GHSA-5jpm-x58v-624v","Warn: Project is vulnerable to: GHSA-5mcr-gq6c-3hq2","Warn: Project is vulnerable to: GHSA-wx5j-54mm-rqqq","Warn: Project is vulnerable to: GHSA-f256-j965-7f32","Warn: Project is vulnerable to: GHSA-wm47-8v5p-wjpj","Warn: Project is vulnerable to: GHSA-xpw8-rcwv-8f8p","Warn: Project is vulnerable to: GHSA-389x-839f-4rhx","Warn: Project is vulnerable to: GHSA-xq3w-v528-46rv","Warn: Project is vulnerable to: GHSA-6mjq-h674-j845","Warn: Project is vulnerable to: GHSA-264p-99wq-f4j6"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T02:12:02.151Z","repository_id":32269651,"created_at":"2025-08-17T02:12:02.152Z","updated_at":"2025-08-17T02:12:02.152Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":275685794,"owners_count":25509540,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-17T02:00:09.119Z","response_time":84,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":506,"last_synced_at":"2025-09-16T08:58:33.051Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":235631,"followers":13015,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2025-09-16T08:58:33.051Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[{"name":"profiler-extension-0.1.1","sha":"e8d88b00270f94838a9876f290d0af70b46b73e6","kind":"commit","published_at":"2025-03-31T14:01:36.000Z","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/profiler-extension-0.1.1","html_url":"https://github.com/aws/aws-lambda-java-libs/releases/tag/profiler-extension-0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-lambda-java-libs@profiler-extension-0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/profiler-extension-0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/profiler-extension-0.1.1/manifests"},{"name":"profiler-extension-0.1.0","sha":"dfb89116693b63750dbecec3c17809f029f856ae","kind":"commit","published_at":"2025-03-24T14:37:50.000Z","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/profiler-extension-0.1.0","html_url":"https://github.com/aws/aws-lambda-java-libs/releases/tag/profiler-extension-0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-lambda-java-libs@profiler-extension-0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/profiler-extension-0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/profiler-extension-0.1.0/manifests"},{"name":"run-integration-tests","sha":"928b71e2963bcb8b4d74bc017904dd39b4cc9b40","kind":"commit","published_at":"2024-08-23T09:39:20.000Z","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/run-integration-tests","html_url":"https://github.com/aws/aws-lambda-java-libs/releases/tag/run-integration-tests","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-lambda-java-libs@run-integration-tests","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/run-integration-tests","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/run-integration-tests/manifests"}]},"repo_metadata_updated_at":"2025-10-12T23:45:38.520Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":7,"rankings":{"downloads":null,"dependent_repos_count":9.173479201731185,"dependent_packages_count":49.884988378616654,"stargazers_count":16.17896930351847,"forks_count":13.54251823354973,"docker_downloads_count":null,"average":22.19498877935401},"purl":"pkg:maven/com.amazonaws/aws-lambda-java-events-sdk-transformer","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-lambda-java-events-sdk-transformer","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-lambda-java-events-sdk-transformer","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-lambda-java-events-sdk-transformer/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-09-27T01:06:15.706Z","issues_count":74,"pull_requests_count":222,"avg_time_to_close_issue":29306152.94736842,"avg_time_to_close_pull_request":3045921.0054347827,"issues_closed_count":38,"pull_requests_closed_count":183,"pull_request_authors_count":53,"issue_authors_count":69,"avg_comments_per_issue":3.5405405405405403,"avg_comments_per_pull_request":0.8063063063063063,"merged_pull_requests_count":152,"bot_issues_count":0,"bot_pull_requests_count":15,"past_year_issues_count":15,"past_year_pull_requests_count":59,"past_year_avg_time_to_close_issue":3191127.75,"past_year_avg_time_to_close_pull_request":305823.975,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":13,"past_year_avg_comments_per_issue":0.4,"past_year_avg_comments_per_pull_request":0.3050847457627119,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":37,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/issues","maintainers":[{"login":"msailes","count":27,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/msailes"},{"login":"dtorok","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dtorok"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-events-sdk-transformer/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-events-sdk-transformer/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-events-sdk-transformer/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-events-sdk-transformer/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-events-sdk-transformer/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":578407,"maintainers_count":0,"namespaces_count":76765,"keywords_count":35314,"github":"maven-central","metadata":{"funded_packages_count":38921},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-01-14T06:46:29.907Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4652970,"name":"com.amazonaws:aws-lambda-java-tests","ecosystem":"maven","description":"Testing module for the AWS Lambda Java Runtime","homepage":"https://aws.amazon.com/lambda/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-lambda-java-libs","keywords_array":[],"namespace":"com.amazonaws","versions_count":6,"first_release_published_at":"2020-12-10T15:17:01.000Z","latest_release_published_at":"2025-07-24T14:26:17.000Z","latest_release_number":"1.1.2","last_synced_at":"2026-01-11T04:36:36.722Z","created_at":"2022-07-25T16:39:28.270Z","updated_at":"2026-01-11T04:36:36.723Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-lambda-java-tests/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-lambda-java-tests/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":32269651,"uuid":"35844242","full_name":"aws/aws-lambda-java-libs","owner":"aws","description":"Official mirror for interface definitions and helper classes for Java code running on the AWS Lambda platform.","archived":false,"fork":false,"pushed_at":"2025-09-09T12:42:49.000Z","size":32820,"stargazers_count":542,"open_issues_count":61,"forks_count":238,"subscribers_count":54,"default_branch":"main","last_synced_at":"2025-09-12T22:18:41.898Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://aws.amazon.com/lambda/","language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-05-18T21:43:45.000Z","updated_at":"2025-09-09T12:42:53.000Z","dependencies_parsed_at":"2024-06-11T16:15:40.034Z","dependency_job_id":"02babb69-cd15-4182-a04c-43eecdf306e9","html_url":"https://github.com/aws/aws-lambda-java-libs","commit_stats":{"total_commits":269,"total_committers":74,"mean_commits":3.635135135135135,"dds":0.8252788104089219,"last_synced_commit":"6538136ecaefa884d23a821c55ab48ca7deeaa3e"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-lambda-java-libs","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/sbom","scorecard":{"id":219413,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-lambda-java-libs","commit":"e54cf69b3751868b1adaf4824bb82744ed1fdfd1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.4,"checks":[{"name":"Maintained","score":10,"reason":"16 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/aws-lambda-java-profiler.yml:22","Info: jobLevel 'contents' permission set to 'read': .github/workflows/runtime-interface-client_merge_to_main.yml:28","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-core.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-events.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-log4j2.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-profiler.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-serialization.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/repo-sync.yml:1","Warn: no topLevel permission defined: .github/workflows/runtime-interface-client_merge_to_main.yml:1","Warn: no topLevel permission defined: .github/workflows/runtime-interface-client_pr.yml:1","Warn: no topLevel permission defined: .github/workflows/samples.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: experimental/aws-lambda-java-profiler/extension/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-core.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-core.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events-sdk-transformer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events-sdk-transformer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-log4j2.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-log4j2.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-log4j2.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-log4j2.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-serialization.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-serialization.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-serialization.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-serialization.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-tests.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-tests.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/samples.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/Dockerfile.glibc:1: pin your Docker image by updating public.ecr.aws/amazonlinux/amazonlinux:2 to public.ecr.aws/amazonlinux/amazonlinux:2@sha256:281cd59b0f58e009fd9165c26e05eafcf8523fa10651fe36f725b7f7e20b094a","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/Dockerfile.musl:1: pin your Docker image by updating public.ecr.aws/docker/library/alpine:3 to public.ecr.aws/docker/library/alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/deps/aws-lambda-cpp-0.2.7/examples/Dockerfile:1: pin your Docker image by updating alpine:latest to alpine:latest@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/codebuild-local/Dockerfile.agent:1: pin your Docker image by updating public.ecr.aws/amazoncorretto/amazoncorretto:8 to public.ecr.aws/amazoncorretto/amazoncorretto:8@sha256:8db090471159f79003debfd0821cef281523857a5804846a9fa644262ffcf7f7","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.alpine:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.amazoncorretto:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.amazonlinux:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.centos:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.debian:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.debian:12","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.ubuntu:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.ubuntu:13","Info:   0 out of  27 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  11 third-party GitHubAction dependencies pinned","Info:   0 out of  12 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"21 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-c28r-hw5m-5gv3","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-9vjp-v76f-g363","Warn: Project is vulnerable to: GHSA-grg4-wf29-r9vv","Warn: Project is vulnerable to: GHSA-269q-hmxg-m83q","Warn: Project is vulnerable to: GHSA-5jpm-x58v-624v","Warn: Project is vulnerable to: GHSA-5mcr-gq6c-3hq2","Warn: Project is vulnerable to: GHSA-wx5j-54mm-rqqq","Warn: Project is vulnerable to: GHSA-f256-j965-7f32","Warn: Project is vulnerable to: GHSA-wm47-8v5p-wjpj","Warn: Project is vulnerable to: GHSA-xpw8-rcwv-8f8p","Warn: Project is vulnerable to: GHSA-389x-839f-4rhx","Warn: Project is vulnerable to: GHSA-xq3w-v528-46rv","Warn: Project is vulnerable to: GHSA-6mjq-h674-j845","Warn: Project is vulnerable to: GHSA-264p-99wq-f4j6"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T02:12:02.151Z","repository_id":32269651,"created_at":"2025-08-17T02:12:02.152Z","updated_at":"2025-08-17T02:12:02.152Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":275685794,"owners_count":25509540,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-17T02:00:09.119Z","response_time":84,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":506,"last_synced_at":"2025-09-16T08:58:33.051Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":235631,"followers":13015,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2025-09-16T08:58:33.051Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[{"name":"profiler-extension-0.1.1","sha":"e8d88b00270f94838a9876f290d0af70b46b73e6","kind":"commit","published_at":"2025-03-31T14:01:36.000Z","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/profiler-extension-0.1.1","html_url":"https://github.com/aws/aws-lambda-java-libs/releases/tag/profiler-extension-0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-lambda-java-libs@profiler-extension-0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/profiler-extension-0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/profiler-extension-0.1.1/manifests"},{"name":"profiler-extension-0.1.0","sha":"dfb89116693b63750dbecec3c17809f029f856ae","kind":"commit","published_at":"2025-03-24T14:37:50.000Z","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/profiler-extension-0.1.0","html_url":"https://github.com/aws/aws-lambda-java-libs/releases/tag/profiler-extension-0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-lambda-java-libs@profiler-extension-0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/profiler-extension-0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/profiler-extension-0.1.0/manifests"},{"name":"run-integration-tests","sha":"928b71e2963bcb8b4d74bc017904dd39b4cc9b40","kind":"commit","published_at":"2024-08-23T09:39:20.000Z","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/run-integration-tests","html_url":"https://github.com/aws/aws-lambda-java-libs/releases/tag/run-integration-tests","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-lambda-java-libs@run-integration-tests","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/run-integration-tests","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/run-integration-tests/manifests"}]},"repo_metadata_updated_at":"2025-10-12T23:45:19.022Z","dependent_packages_count":14,"downloads":null,"downloads_period":null,"dependent_repos_count":39,"rankings":{"downloads":null,"dependent_repos_count":3.512863669151238,"dependent_packages_count":4.708062835617536,"stargazers_count":16.17896930351847,"forks_count":13.54251823354973,"docker_downloads_count":null,"average":9.485603510459244},"purl":"pkg:maven/com.amazonaws/aws-lambda-java-tests","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-lambda-java-tests","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-lambda-java-tests","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-lambda-java-tests/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-09-27T01:06:15.706Z","issues_count":74,"pull_requests_count":222,"avg_time_to_close_issue":29306152.94736842,"avg_time_to_close_pull_request":3045921.0054347827,"issues_closed_count":38,"pull_requests_closed_count":183,"pull_request_authors_count":53,"issue_authors_count":69,"avg_comments_per_issue":3.5405405405405403,"avg_comments_per_pull_request":0.8063063063063063,"merged_pull_requests_count":152,"bot_issues_count":0,"bot_pull_requests_count":15,"past_year_issues_count":15,"past_year_pull_requests_count":59,"past_year_avg_time_to_close_issue":3191127.75,"past_year_avg_time_to_close_pull_request":305823.975,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":13,"past_year_avg_comments_per_issue":0.4,"past_year_avg_comments_per_pull_request":0.3050847457627119,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":37,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/issues","maintainers":[{"login":"msailes","count":27,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/msailes"},{"login":"dtorok","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dtorok"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-tests/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-tests/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-tests/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-tests/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-tests/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":578407,"maintainers_count":0,"namespaces_count":76765,"keywords_count":35314,"github":"maven-central","metadata":{"funded_packages_count":38921},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-01-14T06:46:29.907Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4652966,"name":"com.amazonaws:aws-lambda-java-log4j","ecosystem":"maven","description":"Support for using log4j 1.2 with AWS Lambda.","homepage":"https://aws.amazon.com/lambda/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-lambda-java-libs","keywords_array":[],"namespace":"com.amazonaws","versions_count":2,"first_release_published_at":"2015-10-07T23:44:06.000Z","latest_release_published_at":"2020-04-28T15:13:24.000Z","latest_release_number":"1.0.1","last_synced_at":"2026-01-11T04:37:47.793Z","created_at":"2022-07-25T16:39:24.938Z","updated_at":"2026-01-11T04:37:47.793Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-lambda-java-log4j/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-lambda-java-log4j/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"],"distribution_repositories":["https://oss.sonatype.org/service/local/staging/deploy/maven2/"]},"repo_metadata":{"id":32269651,"uuid":"35844242","full_name":"aws/aws-lambda-java-libs","owner":"aws","description":"Official mirror for interface definitions and helper classes for Java code running on the AWS Lambda platform.","archived":false,"fork":false,"pushed_at":"2025-09-09T12:42:49.000Z","size":32820,"stargazers_count":542,"open_issues_count":61,"forks_count":238,"subscribers_count":54,"default_branch":"main","last_synced_at":"2025-09-12T22:18:41.898Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://aws.amazon.com/lambda/","language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-05-18T21:43:45.000Z","updated_at":"2025-09-09T12:42:53.000Z","dependencies_parsed_at":"2024-06-11T16:15:40.034Z","dependency_job_id":"02babb69-cd15-4182-a04c-43eecdf306e9","html_url":"https://github.com/aws/aws-lambda-java-libs","commit_stats":{"total_commits":269,"total_committers":74,"mean_commits":3.635135135135135,"dds":0.8252788104089219,"last_synced_commit":"6538136ecaefa884d23a821c55ab48ca7deeaa3e"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-lambda-java-libs","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/sbom","scorecard":{"id":219413,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-lambda-java-libs","commit":"e54cf69b3751868b1adaf4824bb82744ed1fdfd1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.4,"checks":[{"name":"Maintained","score":10,"reason":"16 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/aws-lambda-java-profiler.yml:22","Info: jobLevel 'contents' permission set to 'read': .github/workflows/runtime-interface-client_merge_to_main.yml:28","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-core.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-events.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-log4j2.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-profiler.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-serialization.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/repo-sync.yml:1","Warn: no topLevel permission defined: .github/workflows/runtime-interface-client_merge_to_main.yml:1","Warn: no topLevel permission defined: .github/workflows/runtime-interface-client_pr.yml:1","Warn: no topLevel permission defined: .github/workflows/samples.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: experimental/aws-lambda-java-profiler/extension/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-core.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-core.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events-sdk-transformer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events-sdk-transformer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-log4j2.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-log4j2.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-log4j2.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-log4j2.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-serialization.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-serialization.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-serialization.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-serialization.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-tests.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-tests.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/samples.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/Dockerfile.glibc:1: pin your Docker image by updating public.ecr.aws/amazonlinux/amazonlinux:2 to public.ecr.aws/amazonlinux/amazonlinux:2@sha256:281cd59b0f58e009fd9165c26e05eafcf8523fa10651fe36f725b7f7e20b094a","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/Dockerfile.musl:1: pin your Docker image by updating public.ecr.aws/docker/library/alpine:3 to public.ecr.aws/docker/library/alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/deps/aws-lambda-cpp-0.2.7/examples/Dockerfile:1: pin your Docker image by updating alpine:latest to alpine:latest@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/codebuild-local/Dockerfile.agent:1: pin your Docker image by updating public.ecr.aws/amazoncorretto/amazoncorretto:8 to public.ecr.aws/amazoncorretto/amazoncorretto:8@sha256:8db090471159f79003debfd0821cef281523857a5804846a9fa644262ffcf7f7","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.alpine:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.amazoncorretto:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.amazonlinux:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.centos:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.debian:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.debian:12","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.ubuntu:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.ubuntu:13","Info:   0 out of  27 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  11 third-party GitHubAction dependencies pinned","Info:   0 out of  12 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"21 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-c28r-hw5m-5gv3","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-9vjp-v76f-g363","Warn: Project is vulnerable to: GHSA-grg4-wf29-r9vv","Warn: Project is vulnerable to: GHSA-269q-hmxg-m83q","Warn: Project is vulnerable to: GHSA-5jpm-x58v-624v","Warn: Project is vulnerable to: GHSA-5mcr-gq6c-3hq2","Warn: Project is vulnerable to: GHSA-wx5j-54mm-rqqq","Warn: Project is vulnerable to: GHSA-f256-j965-7f32","Warn: Project is vulnerable to: GHSA-wm47-8v5p-wjpj","Warn: Project is vulnerable to: GHSA-xpw8-rcwv-8f8p","Warn: Project is vulnerable to: GHSA-389x-839f-4rhx","Warn: Project is vulnerable to: GHSA-xq3w-v528-46rv","Warn: Project is vulnerable to: GHSA-6mjq-h674-j845","Warn: Project is vulnerable to: GHSA-264p-99wq-f4j6"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T02:12:02.151Z","repository_id":32269651,"created_at":"2025-08-17T02:12:02.152Z","updated_at":"2025-08-17T02:12:02.152Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":275685794,"owners_count":25509540,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-17T02:00:09.119Z","response_time":84,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":509,"last_synced_at":"2025-09-29T21:05:45.824Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":236227,"followers":13171,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2025-09-29T21:05:45.824Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-12T23:45:18.852Z","dependent_packages_count":25,"downloads":null,"downloads_period":null,"dependent_repos_count":427,"rankings":{"downloads":null,"dependent_repos_count":0.6772461328845075,"dependent_packages_count":2.553899174481045,"stargazers_count":16.17896930351847,"forks_count":13.54251823354973,"docker_downloads_count":2.599382864470626,"average":7.110403141780876},"purl":"pkg:maven/com.amazonaws/aws-lambda-java-log4j","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-lambda-java-log4j","docker_dependents_count":41,"docker_downloads_count":1584040,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-lambda-java-log4j","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-lambda-java-log4j/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-10T01:40:07.205Z","issues_count":74,"pull_requests_count":222,"avg_time_to_close_issue":29306152.94736842,"avg_time_to_close_pull_request":3045921.0054347827,"issues_closed_count":38,"pull_requests_closed_count":183,"pull_request_authors_count":53,"issue_authors_count":69,"avg_comments_per_issue":3.5405405405405403,"avg_comments_per_pull_request":0.8108108108108109,"merged_pull_requests_count":152,"bot_issues_count":0,"bot_pull_requests_count":15,"past_year_issues_count":15,"past_year_pull_requests_count":59,"past_year_avg_time_to_close_issue":3191127.75,"past_year_avg_time_to_close_pull_request":305823.975,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":13,"past_year_avg_comments_per_issue":0.4,"past_year_avg_comments_per_pull_request":0.3220338983050847,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":37,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/issues","maintainers":[{"login":"msailes","count":27,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/msailes"},{"login":"dtorok","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dtorok"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-log4j/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-log4j/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-log4j/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-log4j/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-log4j/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":578407,"maintainers_count":0,"namespaces_count":76765,"keywords_count":35314,"github":"maven-central","metadata":{"funded_packages_count":38921},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-01-14T06:46:29.907Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4652977,"name":"com.amazonaws:aws-lambda-java-events","ecosystem":"maven","description":"Event interface definitions AWS services supported by AWS Lambda.","homepage":"https://aws.amazon.com/lambda/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-lambda-java-libs","keywords_array":[],"namespace":"com.amazonaws","versions_count":45,"first_release_published_at":"2015-06-15T17:39:15.000Z","latest_release_published_at":"2025-07-16T11:40:43.000Z","latest_release_number":"3.16.1","last_synced_at":"2026-01-11T04:37:47.611Z","created_at":"2022-07-25T16:39:31.558Z","updated_at":"2026-01-11T04:37:47.612Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-lambda-java-events/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-lambda-java-events/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"],"distribution_repositories":["https://oss.sonatype.org/service/local/staging/deploy/maven2/"]},"repo_metadata":{"id":32269651,"uuid":"35844242","full_name":"aws/aws-lambda-java-libs","owner":"aws","description":"Official mirror for interface definitions and helper classes for Java code running on the AWS Lambda platform.","archived":false,"fork":false,"pushed_at":"2025-09-09T12:42:49.000Z","size":32820,"stargazers_count":542,"open_issues_count":61,"forks_count":238,"subscribers_count":54,"default_branch":"main","last_synced_at":"2025-09-12T22:18:41.898Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://aws.amazon.com/lambda/","language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-05-18T21:43:45.000Z","updated_at":"2025-09-09T12:42:53.000Z","dependencies_parsed_at":"2024-06-11T16:15:40.034Z","dependency_job_id":"02babb69-cd15-4182-a04c-43eecdf306e9","html_url":"https://github.com/aws/aws-lambda-java-libs","commit_stats":{"total_commits":269,"total_committers":74,"mean_commits":3.635135135135135,"dds":0.8252788104089219,"last_synced_commit":"6538136ecaefa884d23a821c55ab48ca7deeaa3e"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-lambda-java-libs","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/sbom","scorecard":{"id":219413,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-lambda-java-libs","commit":"e54cf69b3751868b1adaf4824bb82744ed1fdfd1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.4,"checks":[{"name":"Maintained","score":10,"reason":"16 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/aws-lambda-java-profiler.yml:22","Info: jobLevel 'contents' permission set to 'read': .github/workflows/runtime-interface-client_merge_to_main.yml:28","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-core.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-events.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-log4j2.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-profiler.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-serialization.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/repo-sync.yml:1","Warn: no topLevel permission defined: .github/workflows/runtime-interface-client_merge_to_main.yml:1","Warn: no topLevel permission defined: .github/workflows/runtime-interface-client_pr.yml:1","Warn: no topLevel permission defined: .github/workflows/samples.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: experimental/aws-lambda-java-profiler/extension/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-core.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-core.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events-sdk-transformer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events-sdk-transformer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-log4j2.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-log4j2.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-log4j2.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-log4j2.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-serialization.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-serialization.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-serialization.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-serialization.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-tests.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-tests.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/samples.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/Dockerfile.glibc:1: pin your Docker image by updating public.ecr.aws/amazonlinux/amazonlinux:2 to public.ecr.aws/amazonlinux/amazonlinux:2@sha256:281cd59b0f58e009fd9165c26e05eafcf8523fa10651fe36f725b7f7e20b094a","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/Dockerfile.musl:1: pin your Docker image by updating public.ecr.aws/docker/library/alpine:3 to public.ecr.aws/docker/library/alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/deps/aws-lambda-cpp-0.2.7/examples/Dockerfile:1: pin your Docker image by updating alpine:latest to alpine:latest@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/codebuild-local/Dockerfile.agent:1: pin your Docker image by updating public.ecr.aws/amazoncorretto/amazoncorretto:8 to public.ecr.aws/amazoncorretto/amazoncorretto:8@sha256:8db090471159f79003debfd0821cef281523857a5804846a9fa644262ffcf7f7","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.alpine:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.amazoncorretto:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.amazonlinux:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.centos:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.debian:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.debian:12","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.ubuntu:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.ubuntu:13","Info:   0 out of  27 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  11 third-party GitHubAction dependencies pinned","Info:   0 out of  12 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"21 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-c28r-hw5m-5gv3","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-9vjp-v76f-g363","Warn: Project is vulnerable to: GHSA-grg4-wf29-r9vv","Warn: Project is vulnerable to: GHSA-269q-hmxg-m83q","Warn: Project is vulnerable to: GHSA-5jpm-x58v-624v","Warn: Project is vulnerable to: GHSA-5mcr-gq6c-3hq2","Warn: Project is vulnerable to: GHSA-wx5j-54mm-rqqq","Warn: Project is vulnerable to: GHSA-f256-j965-7f32","Warn: Project is vulnerable to: GHSA-wm47-8v5p-wjpj","Warn: Project is vulnerable to: GHSA-xpw8-rcwv-8f8p","Warn: Project is vulnerable to: GHSA-389x-839f-4rhx","Warn: Project is vulnerable to: GHSA-xq3w-v528-46rv","Warn: Project is vulnerable to: GHSA-6mjq-h674-j845","Warn: Project is vulnerable to: GHSA-264p-99wq-f4j6"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T02:12:02.151Z","repository_id":32269651,"created_at":"2025-08-17T02:12:02.152Z","updated_at":"2025-08-17T02:12:02.152Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":275685794,"owners_count":25509540,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-17T02:00:09.119Z","response_time":84,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":509,"last_synced_at":"2025-09-29T21:05:45.824Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":236227,"followers":13171,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2025-09-29T21:05:45.824Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[{"name":"profiler-extension-0.1.1","sha":"e8d88b00270f94838a9876f290d0af70b46b73e6","kind":"commit","published_at":"2025-03-31T14:01:36.000Z","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/profiler-extension-0.1.1","html_url":"https://github.com/aws/aws-lambda-java-libs/releases/tag/profiler-extension-0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-lambda-java-libs@profiler-extension-0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/profiler-extension-0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/profiler-extension-0.1.1/manifests"},{"name":"profiler-extension-0.1.0","sha":"dfb89116693b63750dbecec3c17809f029f856ae","kind":"commit","published_at":"2025-03-24T14:37:50.000Z","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/profiler-extension-0.1.0","html_url":"https://github.com/aws/aws-lambda-java-libs/releases/tag/profiler-extension-0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-lambda-java-libs@profiler-extension-0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/profiler-extension-0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/profiler-extension-0.1.0/manifests"},{"name":"run-integration-tests","sha":"928b71e2963bcb8b4d74bc017904dd39b4cc9b40","kind":"commit","published_at":"2024-08-23T09:39:20.000Z","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/run-integration-tests","html_url":"https://github.com/aws/aws-lambda-java-libs/releases/tag/run-integration-tests","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-lambda-java-libs@run-integration-tests","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/run-integration-tests","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/run-integration-tests/manifests"}]},"repo_metadata_updated_at":"2025-10-12T23:46:57.066Z","dependent_packages_count":139,"downloads":null,"downloads_period":null,"dependent_repos_count":2186,"rankings":{"downloads":null,"dependent_repos_count":0.22902139937484972,"dependent_packages_count":0.5558227137933798,"stargazers_count":16.17896930351847,"forks_count":13.54251823354973,"docker_downloads_count":0.40454436162539076,"average":6.182175202372364},"purl":"pkg:maven/com.amazonaws/aws-lambda-java-events","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-lambda-java-events","docker_dependents_count":158,"docker_downloads_count":206093464,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-lambda-java-events","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-lambda-java-events/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-10T01:40:07.205Z","issues_count":74,"pull_requests_count":222,"avg_time_to_close_issue":29306152.94736842,"avg_time_to_close_pull_request":3045921.0054347827,"issues_closed_count":38,"pull_requests_closed_count":183,"pull_request_authors_count":53,"issue_authors_count":69,"avg_comments_per_issue":3.5405405405405403,"avg_comments_per_pull_request":0.8108108108108109,"merged_pull_requests_count":152,"bot_issues_count":0,"bot_pull_requests_count":15,"past_year_issues_count":15,"past_year_pull_requests_count":59,"past_year_avg_time_to_close_issue":3191127.75,"past_year_avg_time_to_close_pull_request":305823.975,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":13,"past_year_avg_comments_per_issue":0.4,"past_year_avg_comments_per_pull_request":0.3220338983050847,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":37,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/issues","maintainers":[{"login":"msailes","count":27,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/msailes"},{"login":"dtorok","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dtorok"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-events/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-events/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-events/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-events/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-events/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":578407,"maintainers_count":0,"namespaces_count":76765,"keywords_count":35314,"github":"maven-central","metadata":{"funded_packages_count":38921},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-01-14T06:46:29.907Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4652965,"name":"com.amazonaws:aws-lambda-java-core","ecosystem":"maven","description":"Minimal set of interface definitions for Java support in AWS Lambda","homepage":"https://aws.amazon.com/lambda/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-lambda-java-libs","keywords_array":[],"namespace":"com.amazonaws","versions_count":8,"first_release_published_at":"2015-06-15T17:34:41.000Z","latest_release_published_at":"2025-09-03T19:16:56.000Z","latest_release_number":"1.4.0","last_synced_at":"2026-01-11T04:37:48.506Z","created_at":"2022-07-25T16:39:22.292Z","updated_at":"2026-01-11T04:37:48.506Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-lambda-java-core/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-lambda-java-core/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"],"distribution_repositories":["https://oss.sonatype.org/service/local/staging/deploy/maven2/"]},"repo_metadata":{"id":32269651,"uuid":"35844242","full_name":"aws/aws-lambda-java-libs","owner":"aws","description":"Official mirror for interface definitions and helper classes for Java code running on the AWS Lambda platform.","archived":false,"fork":false,"pushed_at":"2025-09-09T12:42:49.000Z","size":32820,"stargazers_count":542,"open_issues_count":61,"forks_count":238,"subscribers_count":54,"default_branch":"main","last_synced_at":"2025-09-12T22:18:41.898Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://aws.amazon.com/lambda/","language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-05-18T21:43:45.000Z","updated_at":"2025-09-09T12:42:53.000Z","dependencies_parsed_at":"2024-06-11T16:15:40.034Z","dependency_job_id":"02babb69-cd15-4182-a04c-43eecdf306e9","html_url":"https://github.com/aws/aws-lambda-java-libs","commit_stats":{"total_commits":269,"total_committers":74,"mean_commits":3.635135135135135,"dds":0.8252788104089219,"last_synced_commit":"6538136ecaefa884d23a821c55ab48ca7deeaa3e"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-lambda-java-libs","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/sbom","scorecard":{"id":219413,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-lambda-java-libs","commit":"e54cf69b3751868b1adaf4824bb82744ed1fdfd1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.4,"checks":[{"name":"Maintained","score":10,"reason":"16 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/aws-lambda-java-profiler.yml:22","Info: jobLevel 'contents' permission set to 'read': .github/workflows/runtime-interface-client_merge_to_main.yml:28","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-core.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-events.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-log4j2.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-profiler.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-serialization.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/repo-sync.yml:1","Warn: no topLevel permission defined: .github/workflows/runtime-interface-client_merge_to_main.yml:1","Warn: no topLevel permission defined: .github/workflows/runtime-interface-client_pr.yml:1","Warn: no topLevel permission defined: .github/workflows/samples.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: experimental/aws-lambda-java-profiler/extension/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-core.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-core.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events-sdk-transformer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events-sdk-transformer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-log4j2.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-log4j2.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-log4j2.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-log4j2.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-serialization.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-serialization.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-serialization.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-serialization.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-tests.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-tests.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/samples.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/Dockerfile.glibc:1: pin your Docker image by updating public.ecr.aws/amazonlinux/amazonlinux:2 to public.ecr.aws/amazonlinux/amazonlinux:2@sha256:281cd59b0f58e009fd9165c26e05eafcf8523fa10651fe36f725b7f7e20b094a","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/Dockerfile.musl:1: pin your Docker image by updating public.ecr.aws/docker/library/alpine:3 to public.ecr.aws/docker/library/alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/deps/aws-lambda-cpp-0.2.7/examples/Dockerfile:1: pin your Docker image by updating alpine:latest to alpine:latest@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/codebuild-local/Dockerfile.agent:1: pin your Docker image by updating public.ecr.aws/amazoncorretto/amazoncorretto:8 to public.ecr.aws/amazoncorretto/amazoncorretto:8@sha256:8db090471159f79003debfd0821cef281523857a5804846a9fa644262ffcf7f7","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.alpine:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.amazoncorretto:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.amazonlinux:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.centos:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.debian:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.debian:12","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.ubuntu:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.ubuntu:13","Info:   0 out of  27 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  11 third-party GitHubAction dependencies pinned","Info:   0 out of  12 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"21 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-c28r-hw5m-5gv3","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-9vjp-v76f-g363","Warn: Project is vulnerable to: GHSA-grg4-wf29-r9vv","Warn: Project is vulnerable to: GHSA-269q-hmxg-m83q","Warn: Project is vulnerable to: GHSA-5jpm-x58v-624v","Warn: Project is vulnerable to: GHSA-5mcr-gq6c-3hq2","Warn: Project is vulnerable to: GHSA-wx5j-54mm-rqqq","Warn: Project is vulnerable to: GHSA-f256-j965-7f32","Warn: Project is vulnerable to: GHSA-wm47-8v5p-wjpj","Warn: Project is vulnerable to: GHSA-xpw8-rcwv-8f8p","Warn: Project is vulnerable to: GHSA-389x-839f-4rhx","Warn: Project is vulnerable to: GHSA-xq3w-v528-46rv","Warn: Project is vulnerable to: GHSA-6mjq-h674-j845","Warn: Project is vulnerable to: GHSA-264p-99wq-f4j6"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T02:12:02.151Z","repository_id":32269651,"created_at":"2025-08-17T02:12:02.152Z","updated_at":"2025-08-17T02:12:02.152Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":275685794,"owners_count":25509540,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-17T02:00:09.119Z","response_time":84,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":506,"last_synced_at":"2025-09-16T08:58:33.051Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":235631,"followers":13015,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2025-09-16T08:58:33.051Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[{"name":"profiler-extension-0.1.1","sha":"e8d88b00270f94838a9876f290d0af70b46b73e6","kind":"commit","published_at":"2025-03-31T14:01:36.000Z","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/profiler-extension-0.1.1","html_url":"https://github.com/aws/aws-lambda-java-libs/releases/tag/profiler-extension-0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-lambda-java-libs@profiler-extension-0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/profiler-extension-0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/profiler-extension-0.1.1/manifests"},{"name":"profiler-extension-0.1.0","sha":"dfb89116693b63750dbecec3c17809f029f856ae","kind":"commit","published_at":"2025-03-24T14:37:50.000Z","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/profiler-extension-0.1.0","html_url":"https://github.com/aws/aws-lambda-java-libs/releases/tag/profiler-extension-0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-lambda-java-libs@profiler-extension-0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/profiler-extension-0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/profiler-extension-0.1.0/manifests"},{"name":"run-integration-tests","sha":"928b71e2963bcb8b4d74bc017904dd39b4cc9b40","kind":"commit","published_at":"2024-08-23T09:39:20.000Z","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/run-integration-tests","html_url":"https://github.com/aws/aws-lambda-java-libs/releases/tag/run-integration-tests","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-lambda-java-libs@run-integration-tests","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/run-integration-tests","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags/run-integration-tests/manifests"}]},"repo_metadata_updated_at":"2025-10-12T23:45:38.509Z","dependent_packages_count":296,"downloads":null,"downloads_period":null,"dependent_repos_count":3383,"rankings":{"downloads":null,"dependent_repos_count":0.17351927546685902,"dependent_packages_count":0.26869439769175285,"stargazers_count":16.17896930351847,"forks_count":13.54251823354973,"docker_downloads_count":0.394726296385349,"average":6.111685501322432},"purl":"pkg:maven/com.amazonaws/aws-lambda-java-core","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-lambda-java-core","docker_dependents_count":335,"docker_downloads_count":336944173,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-lambda-java-core","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-lambda-java-core/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-09-27T01:06:15.706Z","issues_count":74,"pull_requests_count":222,"avg_time_to_close_issue":29306152.94736842,"avg_time_to_close_pull_request":3045921.0054347827,"issues_closed_count":38,"pull_requests_closed_count":183,"pull_request_authors_count":53,"issue_authors_count":69,"avg_comments_per_issue":3.5405405405405403,"avg_comments_per_pull_request":0.8063063063063063,"merged_pull_requests_count":152,"bot_issues_count":0,"bot_pull_requests_count":15,"past_year_issues_count":15,"past_year_pull_requests_count":59,"past_year_avg_time_to_close_issue":3191127.75,"past_year_avg_time_to_close_pull_request":305823.975,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":13,"past_year_avg_comments_per_issue":0.4,"past_year_avg_comments_per_pull_request":0.3050847457627119,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":37,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/issues","maintainers":[{"login":"msailes","count":27,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/msailes"},{"login":"dtorok","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dtorok"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-core/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-core/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-core/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-core/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-core/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":578407,"maintainers_count":0,"namespaces_count":76765,"keywords_count":35314,"github":"maven-central","metadata":{"funded_packages_count":38921},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-01-14T06:46:29.907Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4652971,"name":"com.amazonaws:aws-lambda-java-runtime-interface-client","ecosystem":"maven","description":"The AWS Lambda Java Runtime Interface Client implements the Lambda programming model for Java","homepage":"https://aws.amazon.com/lambda/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-lambda-java-libs","keywords_array":[],"namespace":"com.amazonaws","versions_count":26,"first_release_published_at":"2020-12-01T19:37:29.000Z","latest_release_published_at":"2026-01-07T15:45:03.000Z","latest_release_number":"2.9.0","last_synced_at":"2026-01-11T04:37:52.128Z","created_at":"2022-07-25T16:39:28.313Z","updated_at":"2026-01-11T04:37:52.129Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-lambda-java-runtime-interface-client/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-lambda-java-runtime-interface-client/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":32269651,"uuid":"35844242","full_name":"aws/aws-lambda-java-libs","owner":"aws","description":"Official mirror for interface definitions and helper classes for Java code running on the AWS Lambda platform.","archived":false,"fork":false,"pushed_at":"2025-09-09T12:42:49.000Z","size":32820,"stargazers_count":542,"open_issues_count":61,"forks_count":238,"subscribers_count":54,"default_branch":"main","last_synced_at":"2025-09-12T22:18:41.898Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://aws.amazon.com/lambda/","language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-05-18T21:43:45.000Z","updated_at":"2025-09-09T12:42:53.000Z","dependencies_parsed_at":"2024-06-11T16:15:40.034Z","dependency_job_id":"02babb69-cd15-4182-a04c-43eecdf306e9","html_url":"https://github.com/aws/aws-lambda-java-libs","commit_stats":{"total_commits":269,"total_committers":74,"mean_commits":3.635135135135135,"dds":0.8252788104089219,"last_synced_commit":"6538136ecaefa884d23a821c55ab48ca7deeaa3e"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-lambda-java-libs","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-lambda-java-libs/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/sbom","scorecard":{"id":219413,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-lambda-java-libs","commit":"e54cf69b3751868b1adaf4824bb82744ed1fdfd1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.4,"checks":[{"name":"Maintained","score":10,"reason":"16 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/aws-lambda-java-profiler.yml:22","Info: jobLevel 'contents' permission set to 'read': .github/workflows/runtime-interface-client_merge_to_main.yml:28","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-core.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-events.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-log4j2.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-profiler.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-serialization.yml:1","Warn: no topLevel permission defined: .github/workflows/aws-lambda-java-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/repo-sync.yml:1","Warn: no topLevel permission defined: .github/workflows/runtime-interface-client_merge_to_main.yml:1","Warn: no topLevel permission defined: .github/workflows/runtime-interface-client_pr.yml:1","Warn: no topLevel permission defined: .github/workflows/samples.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: experimental/aws-lambda-java-profiler/extension/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-core.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-core.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events-sdk-transformer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events-sdk-transformer.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events-sdk-transformer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-events.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-events.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-log4j2.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-log4j2.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-log4j2.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-log4j2.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-profiler.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-profiler.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-serialization.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-serialization.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-serialization.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-serialization.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-tests.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/aws-lambda-java-tests.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/aws-lambda-java-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/repo-sync.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/repo-sync.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_merge_to_main.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_merge_to_main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-interface-client_pr.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/runtime-interface-client_pr.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/samples.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/samples.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-lambda-java-libs/samples.yml/main?enable=pin","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/Dockerfile.glibc:1: pin your Docker image by updating public.ecr.aws/amazonlinux/amazonlinux:2 to public.ecr.aws/amazonlinux/amazonlinux:2@sha256:281cd59b0f58e009fd9165c26e05eafcf8523fa10651fe36f725b7f7e20b094a","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/Dockerfile.musl:1: pin your Docker image by updating public.ecr.aws/docker/library/alpine:3 to public.ecr.aws/docker/library/alpine:3@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/src/main/jni/deps/aws-lambda-cpp-0.2.7/examples/Dockerfile:1: pin your Docker image by updating alpine:latest to alpine:latest@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/codebuild-local/Dockerfile.agent:1: pin your Docker image by updating public.ecr.aws/amazoncorretto/amazoncorretto:8 to public.ecr.aws/amazoncorretto/amazoncorretto:8@sha256:8db090471159f79003debfd0821cef281523857a5804846a9fa644262ffcf7f7","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.alpine:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.amazoncorretto:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.amazonlinux:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.centos:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.debian:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.debian:12","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.ubuntu:3","Warn: containerImage not pinned by hash: aws-lambda-java-runtime-interface-client/test/integration/docker/Dockerfile.function.ubuntu:13","Info:   0 out of  27 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  11 third-party GitHubAction dependencies pinned","Info:   0 out of  12 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"21 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-c28r-hw5m-5gv3","Warn: Project is vulnerable to: GHSA-h46c-h94j-95f3","Warn: Project is vulnerable to: GHSA-wf8f-6423-gfxg","Warn: Project is vulnerable to: GHSA-288c-cq4h-88gq","Warn: Project is vulnerable to: GHSA-3x8x-79m2-3w2w","Warn: Project is vulnerable to: GHSA-57j2-w4cx-62h2","Warn: Project is vulnerable to: GHSA-jjjh-jjxp-wpff","Warn: Project is vulnerable to: GHSA-rgv9-q543-rqg4","Warn: Project is vulnerable to: GHSA-9vjp-v76f-g363","Warn: Project is vulnerable to: GHSA-grg4-wf29-r9vv","Warn: Project is vulnerable to: GHSA-269q-hmxg-m83q","Warn: Project is vulnerable to: GHSA-5jpm-x58v-624v","Warn: Project is vulnerable to: GHSA-5mcr-gq6c-3hq2","Warn: Project is vulnerable to: GHSA-wx5j-54mm-rqqq","Warn: Project is vulnerable to: GHSA-f256-j965-7f32","Warn: Project is vulnerable to: GHSA-wm47-8v5p-wjpj","Warn: Project is vulnerable to: GHSA-xpw8-rcwv-8f8p","Warn: Project is vulnerable to: GHSA-389x-839f-4rhx","Warn: Project is vulnerable to: GHSA-xq3w-v528-46rv","Warn: Project is vulnerable to: GHSA-6mjq-h674-j845","Warn: Project is vulnerable to: GHSA-264p-99wq-f4j6"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T02:12:02.151Z","repository_id":32269651,"created_at":"2025-08-17T02:12:02.152Z","updated_at":"2025-08-17T02:12:02.152Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":275685794,"owners_count":25509540,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-17T02:00:09.119Z","response_time":84,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":506,"last_synced_at":"2025-09-16T08:58:33.051Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":235631,"followers":13015,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2025-09-16T08:58:33.051Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-12T23:45:38.500Z","dependent_packages_count":11,"downloads":null,"downloads_period":null,"dependent_repos_count":61,"rankings":{"downloads":null,"dependent_repos_count":2.6390558627875293,"dependent_packages_count":7.340506532018915,"stargazers_count":16.17896930351847,"forks_count":13.54251823354973,"docker_downloads_count":5.752384387272581,"average":9.090686863829445},"purl":"pkg:maven/com.amazonaws/aws-lambda-java-runtime-interface-client","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-lambda-java-runtime-interface-client","docker_dependents_count":4,"docker_downloads_count":232,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-lambda-java-runtime-interface-client","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-lambda-java-runtime-interface-client/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-09-27T01:06:15.706Z","issues_count":74,"pull_requests_count":222,"avg_time_to_close_issue":29306152.94736842,"avg_time_to_close_pull_request":3045921.0054347827,"issues_closed_count":38,"pull_requests_closed_count":183,"pull_request_authors_count":53,"issue_authors_count":69,"avg_comments_per_issue":3.5405405405405403,"avg_comments_per_pull_request":0.8063063063063063,"merged_pull_requests_count":152,"bot_issues_count":0,"bot_pull_requests_count":15,"past_year_issues_count":15,"past_year_pull_requests_count":59,"past_year_avg_time_to_close_issue":3191127.75,"past_year_avg_time_to_close_pull_request":305823.975,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":13,"past_year_avg_comments_per_issue":0.4,"past_year_avg_comments_per_pull_request":0.3050847457627119,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":37,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/issues","maintainers":[{"login":"msailes","count":27,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/msailes"},{"login":"dtorok","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dtorok"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-runtime-interface-client/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-runtime-interface-client/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-runtime-interface-client/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-runtime-interface-client/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-lambda-java-runtime-interface-client/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":578407,"maintainers_count":0,"namespaces_count":76765,"keywords_count":35314,"github":"maven-central","metadata":{"funded_packages_count":38921},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-01-14T06:46:29.907Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}}],"commits":{"id":2209259,"full_name":"aws/aws-lambda-java-libs","default_branch":"main","total_commits":349,"total_committers":81,"total_bot_commits":13,"total_bot_committers":2,"mean_commits":4.308641975308642,"dds":0.8595988538681949,"past_year_total_commits":78,"past_year_total_committers":17,"past_year_total_bot_commits":3,"past_year_total_bot_committers":1,"past_year_mean_commits":4.588235294117647,"past_year_dds":0.7051282051282051,"last_synced_at":"2026-01-14T07:29:36.359Z","last_synced_commit":"b5d9f76fe0ff8cef20eea4a36024853aa355381b","created_at":"2024-10-03T21:05:48.420Z","updated_at":"2026-01-14T07:23:19.010Z","committers":[{"name":"Carl Zogheib","email":"11421173+carlzogh","login":"carlzogh","count":49},{"name":"Bryan Moffatt","email":"bmoffatt","login":"bmoffatt","count":37},{"name":"Alexander Smirnov","email":"75367056+smirnoal","login":"smirnoal","count":30},{"name":"Maxime David","email":"maxday@amazon.com","login":"maxday","count":28},{"name":"Mark Sailes","email":"45629314+msailes","login":"msailes","count":25},{"name":"Mohammed Ehab Elsaeed","email":"33024315+M-Elsaeed","login":"M-Elsaeed","count":23},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":12},{"name":"Daniel Torok","email":"daniel.torok@gmail.com","login":"dtorok","count":8},{"name":"Astraea Quinn Sinclair","email":"quinsclr@amazon.com","login":"m-rph","count":8},{"name":"Andrea Culot","email":"95755271+andclt","login":"andclt","count":8},{"name":"Aditya Suresh","email":"adsuresh@amazon.com","login":"asuresh8","count":7},{"name":"Davide Melfi","email":"darklight3it@gmail.com","login":"darklight3it","count":7},{"name":"Anton Stepanov","email":"110172761+anton-stepanof","login":"anton-stepanof","count":7},{"name":"Astraea Quinn S","email":"52372765+PartiallyUntyped","login":"PartiallyUntyped","count":6},{"name":"zsombor-balogh","email":"69245949+zsombor-balogh","login":"zsombor-balogh","count":6},{"name":"Ramisa Alam","email":"44811300+ramisa2108","login":"ramisa2108","count":4},{"name":"stefanbotez","email":"43352665+stefanbotez","login":"stefanbotez","count":4},{"name":"Jérôme Van Der Linden","email":"jeromevdl@gmail.com","login":"jeromevdl","count":3},{"name":"Alexander Smirnov","email":"smirnoal@amazon.com","login":null,"count":3},{"name":"vinayaksood","email":"vinayaksood.282@gmail.com","login":"vinayaksood","count":2},{"name":"prajeshr","email":"prajesh1","login":"prajesh1","count":2},{"name":"karthikpswamy","email":"karthik.putt@gmail.com","login":"karthikpswamy","count":2},{"name":"Richard Davison","email":"richard.davison1@gmail.com","login":"richarddd","count":2},{"name":"Martin Merfort","email":"395822+mmerfort","login":"mmerfort","count":2},{"name":"Jonathan Tuliani","email":"tulianij@amazon.com","login":"jtuliani","count":2},{"name":"JC Carrillo","email":"jccarrillo@acm.org","login":"jccarrillo","count":2},{"name":"Henri Yandell","email":"hyandell@amazon.com","login":"hyandell","count":2},{"name":"Christian Mueller","email":"christian.mueller@gmail.com","login":"muellerc","count":2},{"name":"Peiyu Wu","email":"peiyuw@amazon.com","login":null,"count":2},{"name":"theo","email":"theofilo@amazon.com","login":null,"count":2},{"name":"Sukanya Hanumanthu","email":"33394600+SukanyaHanumanthu","login":"SukanyaHanumanthu","count":2},{"name":"AntoniaSzecsi","email":"117035062+AntoniaSzecsi","login":"AntoniaSzecsi","count":1},{"name":"Arun Avanathan","email":"arun.avanathan@gmail.com","login":"avanathan","count":1},{"name":"Björn Raupach","email":"raupach@me.com","login":"raupachz","count":1},{"name":"Darren","email":"darren.hobbs@gmail.com","login":"dhobbs","count":1},{"name":"Gerard Alquezar","email":"64564281+galquezar","login":"galquezar","count":1},{"name":"Joseph Moore","email":"joseph_moore@byu.edu","login":null,"count":1},{"name":"Luis Alberto Medina Bravo","email":"luis.medina@gmail.com","login":null,"count":1},{"name":"Mohammed Ehab","email":"moehabe@amazon.com","login":null,"count":1},{"name":"Yamamoto Shun","email":"shun.yamamoto@gunosy.com","login":null,"count":1},{"name":"gal bashan","email":"gal@epsagon.com","login":null,"count":1},{"name":"Tolledo","email":"ps.tolledo@gmail.com","login":"Tolledo","count":1},{"name":"Vince Renders","email":"57711162+render3d","login":"render3d","count":1},{"name":"Vladyslav","email":"senioroman4uk@gmail.com","login":"senioroman4uk","count":1},{"name":"Zabrina Patterson","email":"zabrip@amazon.com","login":"zabrip","count":1},{"name":"alexaiss","email":"126535605+alexaiss","login":"alexaiss","count":1},{"name":"andreac30","email":"50836459+andreac30","login":"andreac30","count":1},{"name":"brlyman","email":"brlyman@amazon.com","login":"BradleyLyman","count":1},{"name":"cayua","email":"98849071+cayua","login":"cayua","count":1},{"name":"github-actions[bot]","email":"41898282+github-actions[bot]","login":"github-actions[bot]","count":1},{"name":"gxstv","email":"gxstv@bu.edu","login":"gxstv","count":1},{"name":"hannah-nguyen","email":"78242123+hannah-nguyen-ca","login":"hannah-nguyen-ca","count":1},{"name":"hercules90","email":"kulkarni.swarnim@gmail.com","login":"hercules90","count":1},{"name":"luben karavelov","email":"luben@amazon.com","login":"luben","count":1},{"name":"mcoup","email":"34345957+mcoup","login":"mcoup","count":1},{"name":"mo7ty","email":"mo7ty","login":"mo7ty","count":1},{"name":"nikrush13","email":"88216039+nikrush13","login":"nikrush13","count":1},{"name":"nithinvommi","email":"93457632+nithinvommi","login":"nithinvommi","count":1},{"name":"preearor","email":"69850117+preearor","login":"preearor","count":1},{"name":"szaloma","email":"szaloma@hlag.com","login":"baldram","count":1},{"name":"vbellotto","email":"vbellotto@hotmail.com","login":"vbellotto","count":1},{"name":"Igor Stepanov","email":"igor.stepanov@kstt.ua","login":"stepio","count":1},{"name":"Ivo Anjo","email":"ivo.anjo@ist.utl.pt","login":"ivoanjo","count":1},{"name":"Jeff Bailey","email":"jbailey2010@gmail.com","login":"jbailey2010","count":1},{"name":"Jeremy Wall","email":"jeremywall","login":"jeremywall","count":1},{"name":"Adnan Khan","email":"AdnaneKhan","login":"AdnaneKhan","count":1},{"name":"Keshav","email":"keshayad@amazon.com","login":"keshayad","count":1},{"name":"Luís Duarte","email":"lduarte@luisduarte.net","login":"driverpt","count":1},{"name":"Miere Teixeira","email":"miere00@gmail.com","login":"miere","count":1},{"name":"Nikolay Metchev","email":"nikolaymetchev@gmail.com","login":"NikolayMetchev","count":1},{"name":"Orestis Gkorgkas","email":"orestis.gorgas@gmail.com","login":"axthosarouris","count":1},{"name":"Philip Cali","email":"philip.cali@gmail.com","login":"philcali","count":1},{"name":"Renato Valenzuela","email":"37676028+valerena","login":"valerena","count":1},{"name":"Rupayan Ghosh","email":"rupayang10@gmail.com","login":"thenewguy39","count":1},{"name":"Sahil Bondre","email":"bondsah@amazon.com","login":"godcrampy","count":1},{"name":"Sergio del Amo","email":"sergio.delamo@softamo.com","login":"sdelamo","count":1},{"name":"Shashank","email":"48707265+ShashankAWS","login":"ShashankAWS","count":1},{"name":"Steffen Grunwald","email":"steffeng@amazon.de","login":"steffeng","count":1},{"name":"Talal Al-Humaidi","email":"77169738+Talhumaidi","login":"Talhumaidi","count":1},{"name":"Theo Hultberg","email":"theo@iconara.net","login":"iconara","count":1},{"name":"Tim Gustafson","email":"tjg@tgustafson.com","login":"TimGustafson","count":1}],"past_year_committers":[{"name":"Mohammed Ehab Elsaeed","email":"33024315+M-Elsaeed","login":"M-Elsaeed","count":23},{"name":"Maxime David","email":"maxday@amazon.com","login":"maxday","count":14},{"name":"Astraea Quinn Sinclair","email":"quinsclr@amazon.com","login":"m-rph","count":8},{"name":"Davide Melfi","email":"darklight3it@gmail.com","login":"darklight3it","count":7},{"name":"Astraea Quinn S","email":"52372765+PartiallyUntyped","login":"PartiallyUntyped","count":6},{"name":"Ramisa Alam","email":"44811300+ramisa2108","login":"ramisa2108","count":4},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":3},{"name":"karthikpswamy","email":"karthik.putt@gmail.com","login":"karthikpswamy","count":2},{"name":"Mark Sailes","email":"45629314+msailes","login":"msailes","count":2},{"name":"Jonathan Tuliani","email":"tulianij@amazon.com","login":"jtuliani","count":2},{"name":"Mohammed Ehab","email":"moehabe@amazon.com","login":null,"count":1},{"name":"Adnan Khan","email":"AdnaneKhan","login":"AdnaneKhan","count":1},{"name":"AntoniaSzecsi","email":"117035062+AntoniaSzecsi","login":"AntoniaSzecsi","count":1},{"name":"Sahil Bondre","email":"bondsah@amazon.com","login":"godcrampy","count":1},{"name":"Steffen Grunwald","email":"steffeng@amazon.de","login":"steffeng","count":1},{"name":"Talal Al-Humaidi","email":"77169738+Talhumaidi","login":"Talhumaidi","count":1},{"name":"hannah-nguyen","email":"78242123+hannah-nguyen-ca","login":"hannah-nguyen-ca","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-01-14T01:12:55.458Z","repositories_count":6164534,"commits_count":932801829,"contributors_count":36256150,"owners_count":1137414,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"aws/aws-lambda-java-libs","html_url":"https://github.com/aws/aws-lambda-java-libs","last_synced_at":"2026-01-09T18:01:49.750Z","status":null,"issues_count":75,"pull_requests_count":228,"avg_time_to_close_issue":29306152.94736842,"avg_time_to_close_pull_request":3025636.9839572194,"issues_closed_count":38,"pull_requests_closed_count":186,"pull_request_authors_count":55,"issue_authors_count":70,"avg_comments_per_issue":3.546666666666667,"avg_comments_per_pull_request":0.7982456140350878,"merged_pull_requests_count":154,"bot_issues_count":0,"bot_pull_requests_count":17,"past_year_issues_count":15,"past_year_pull_requests_count":59,"past_year_avg_time_to_close_issue":3191127.75,"past_year_avg_time_to_close_pull_request":314449.35,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":40,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":13,"past_year_avg_comments_per_issue":0.4666666666666667,"past_year_avg_comments_per_pull_request":0.3389830508474576,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":36,"created_at":"2023-05-15T09:20:26.426Z","updated_at":"2026-01-09T18:01:49.751Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-lambda-java-libs/issues","issue_labels_count":{"table":{"events-v4":8,"question":3,"enhancement":3,"dependencies":2,"invalid":1}},"pull_request_labels_count":{"table":{"dependencies":16,"events-v4":5,"github_actions":5,"java":2,"bug":1,"semver-patch":1}},"issue_author_associations_count":{"table":{"NONE":65,"CONTRIBUTOR":9,"COLLABORATOR":1}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":148,"NONE":47,"COLLABORATOR":33}},"issue_authors":{"table":{"NikolayMetchev":2,"msailes":2,"moonpig-alexis-lowe":2,"deki":2,"maxday":2,"brackxm":1,"einarjohnson":1,"rudpot":1,"Eckelf":1,"wolkenschieber":1,"sdaletalentful":1,"desp0916":1,"softprops":1,"stevenang":1,"alicanguclukol":1,"flipch":1,"abadger2k11":1,"ArtyomGabeev":1,"fedeValtira":1,"yuuresuzuki":1,"nikeshhajari":1,"jhovell":1,"Dretch":1,"johannesfloriangeiger":1,"stefansundin":1,"jaferrando":1,"stepio":1,"mmerfort":1,"aleskiewicz":1,"kgregory-chariot":1,"mo7ty":1,"smoell":1,"sholababalola":1,"Abhisha1":1,"Neil3079":1,"saths008":1,"szczekutekr":1,"Harriebo":1,"marcogrcr":1,"AjitDas":1,"mbamber":1,"smirnoal":1,"ernad-delic":1,"damodhar22":1,"patrickjamesbarry":1,"shaddyz":1,"kiritsuku":1,"torbjokv":1,"wilsonrf":1,"Jerry4013":1,"AgentKWang":1,"peniakoff":1,"dhwanikaneria":1,"bakerhaasis":1,"rynkowsg":1,"gokhanoner":1,"Unshure":1,"varming":1,"villain-bryan":1,"sigpwned":1,"fafriat":1,"patton73":1,"jjant":1,"charlie-harvey-beable":1,"DSkoufis":1,"jhg023":1,"tonyjayfunk":1,"tduncan":1,"Vadym79":1,"everett1992":1}},"pull_request_authors":{"table":{"maxday":39,"smirnoal":33,"msailes":25,"dependabot[bot]":15,"andclt":10,"M-Elsaeed":8,"ramisa2108":8,"dtorok":8,"anton-stepanof":5,"mbfreder":5,"karthikpswamy":5,"lohithpc1":4,"darklight3it":3,"mmerfort":3,"offthewall123":2,"richarddd":2,"SingingBush":2,"ShashankAWS":2,"SentryMan":2,"steffeng":2,"vissa96":2,"gxstv":2,"peniakoff":2,"Talhumaidi":2,"deki":2,"github-actions[bot]":2,"godcrampy":2,"jeromevdl":2,"parawanderer":2,"scaredcat":2,"jonnysw":1,"luben":1,"render3d":1,"shearn89":1,"Sordie":1,"NikolayMetchev":1,"SukanyaHanumanthu":1,"alexaiss":1,"soelvar":1,"mo7ty":1,"torbjokv":1,"fkhantsi":1,"saths008":1,"sdelamo":1,"AdnaneKhan":1,"hannah-nguyen-ca":1,"andrhamm":1,"thenewguy39":1,"driverpt":1,"yongruigao":1,"PartiallyUntyped":1,"pushkarchawda":1,"valerena":1,"tshortess":1,"jccarrillo":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-01-14T00:00:08.713Z","repositories_count":12760298,"issues_count":35848332,"pull_requests_count":117887131,"authors_count":11092418,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{"enhancement":1,"dependencies":1}},"past_year_pull_request_labels_count":{"table":{"dependencies":8,"github_actions":5,"java":2}},"past_year_issue_author_associations_count":{"table":{"NONE":13,"CONTRIBUTOR":2}},"past_year_pull_request_author_associations_count":{"table":{"CONTRIBUTOR":50,"NONE":9}},"past_year_issue_authors":{"table":{"maxday":2,"moonpig-alexis-lowe":2,"charlie-harvey-beable":1,"Harriebo":1,"mbamber":1,"patrickjamesbarry":1,"rynkowsg":1,"saths008":1,"sigpwned":1,"szczekutekr":1,"tonyjayfunk":1,"Vadym79":1,"wilsonrf":1}},"past_year_pull_request_authors":{"table":{"maxday":17,"M-Elsaeed":8,"ramisa2108":8,"dependabot[bot]":7,"karthikpswamy":5,"darklight3it":3,"Talhumaidi":2,"godcrampy":2,"steffeng":2,"andrhamm":1,"AdnaneKhan":1,"saths008":1,"PartiallyUntyped":1,"hannah-nguyen-ca":1}},"maintainers":[{"table":{"login":"msailes","count":26,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/msailes"}},{"table":{"login":"dtorok","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dtorok"}}],"active_maintainers":[]}},"events":{"total":{"CreateEvent":25,"IssuesEvent":18,"WatchEvent":21,"DeleteEvent":11,"MemberEvent":1,"IssueCommentEvent":48,"PushEvent":69,"PullRequestEvent":66,"PullRequestReviewEvent":71,"PullRequestReviewCommentEvent":19,"ForkEvent":12},"last_year":{"CreateEvent":23,"IssuesEvent":17,"WatchEvent":18,"DeleteEvent":10,"MemberEvent":1,"IssueCommentEvent":35,"PushEvent":67,"PullRequestReviewCommentEvent":18,"PullRequestReviewEvent":67,"PullRequestEvent":60,"ForkEvent":11}},"keywords":[],"dependencies":[{"ecosystem":"actions","filepath":".github/workflows/aws-lambda-java-core.yml","sha":null,"kind":"manifest","created_at":"2023-01-14T21:00:44.804Z","updated_at":"2023-01-14T21:00:44.804Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/.github/workflows/aws-lambda-java-core.yml","dependencies":[{"id":6906254281,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6906254285,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/aws-lambda-java-events-sdk-transformer.yml","sha":null,"kind":"manifest","created_at":"2023-01-14T21:00:44.849Z","updated_at":"2023-01-14T21:00:44.849Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/.github/workflows/aws-lambda-java-events-sdk-transformer.yml","dependencies":[{"id":6906254411,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6906254412,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/aws-lambda-java-events.yml","sha":null,"kind":"manifest","created_at":"2023-01-14T21:00:44.873Z","updated_at":"2023-01-14T21:00:44.873Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/.github/workflows/aws-lambda-java-events.yml","dependencies":[{"id":6906254413,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6906254414,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/aws-lambda-java-log4j2.yml","sha":null,"kind":"manifest","created_at":"2023-01-14T21:00:44.946Z","updated_at":"2023-01-14T21:00:44.946Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/.github/workflows/aws-lambda-java-log4j2.yml","dependencies":[{"id":6906254420,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6906254421,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/aws-lambda-java-serialization.yml","sha":null,"kind":"manifest","created_at":"2023-01-14T21:00:44.972Z","updated_at":"2023-01-14T21:00:44.972Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/.github/workflows/aws-lambda-java-serialization.yml","dependencies":[{"id":6906254425,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6906254426,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/aws-lambda-java-tests.yml","sha":null,"kind":"manifest","created_at":"2023-01-14T21:00:44.997Z","updated_at":"2023-01-14T21:00:44.997Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/.github/workflows/aws-lambda-java-tests.yml","dependencies":[{"id":6906254446,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6906254447,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/repo-sync.yml","sha":null,"kind":"manifest","created_at":"2023-01-14T21:00:45.020Z","updated_at":"2023-01-14T21:00:45.020Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/.github/workflows/repo-sync.yml","dependencies":[{"id":6906254448,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6906254449,"package_name":"repo-sync/github-sync","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6906254450,"package_name":"repo-sync/pull-request","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/runtime-interface-client_merge_to_main.yml","sha":null,"kind":"manifest","created_at":"2023-01-14T21:00:45.067Z","updated_at":"2023-01-14T21:00:45.067Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/.github/workflows/runtime-interface-client_merge_to_main.yml","dependencies":[{"id":6906254549,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6906254550,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6906254551,"package_name":"docker/setup-qemu-action","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6906254552,"package_name":"docker/setup-buildx-action","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6906254553,"package_name":"aws-actions/configure-aws-credentials","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/runtime-interface-client_pr.yml","sha":null,"kind":"manifest","created_at":"2023-01-14T21:00:45.131Z","updated_at":"2023-01-14T21:00:45.131Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/.github/workflows/runtime-interface-client_pr.yml","dependencies":[{"id":6906254558,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6906254559,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6906254560,"package_name":"docker/setup-qemu-action","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6906254561,"package_name":"docker/setup-buildx-action","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6906254562,"package_name":"actions/upload-artifact","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/samples.yml","sha":null,"kind":"manifest","created_at":"2023-01-14T21:00:45.218Z","updated_at":"2023-01-14T21:00:45.218Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/.github/workflows/samples.yml","dependencies":[{"id":6906254563,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6906254564,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"docker","filepath":"aws-lambda-java-runtime-interface-client/src/main/jni/deps/aws-lambda-cpp-0.2.7/examples/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-01-14T21:00:45.316Z","updated_at":"2023-01-14T21:00:45.316Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/aws-lambda-java-runtime-interface-client/src/main/jni/deps/aws-lambda-cpp-0.2.7/examples/Dockerfile","dependencies":[{"id":6906255779,"package_name":"alpine","ecosystem":"docker","requirements":"latest","direct":true,"kind":"build","optional":false}]},{"ecosystem":"maven","filepath":"aws-lambda-java-events/pom.xml","sha":null,"kind":"manifest","created_at":"2023-01-14T21:00:45.611Z","updated_at":"2023-01-14T21:00:45.611Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/aws-lambda-java-events/pom.xml","dependencies":[{"id":6906257024,"package_name":"joda-time:joda-time","ecosystem":"maven","requirements":"2.6","direct":true,"kind":"runtime","optional":false},{"id":6906257025,"package_name":"org.junit.jupiter:junit-jupiter-engine","ecosystem":"maven","requirements":"5.7.0","direct":true,"kind":"test","optional":false},{"id":6906257026,"package_name":"com.fasterxml.jackson.core:jackson-databind","ecosystem":"maven","requirements":"2.13.4.1","direct":true,"kind":"test","optional":false},{"id":6906257027,"package_name":"net.javacrumbs.json-unit:json-unit-assertj","ecosystem":"maven","requirements":"2.22.0","direct":true,"kind":"test","optional":false},{"id":6906257028,"package_name":"org.projectlombok:lombok","ecosystem":"maven","requirements":"1.18.22","direct":true,"kind":"provided","optional":false}]},{"ecosystem":"maven","filepath":"aws-lambda-java-events-sdk-transformer/pom.xml","sha":null,"kind":"manifest","created_at":"2023-01-14T21:00:45.787Z","updated_at":"2023-01-14T21:00:45.787Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/aws-lambda-java-events-sdk-transformer/pom.xml","dependencies":[{"id":6906257050,"package_name":"software.amazon.awssdk:dynamodb","ecosystem":"maven","requirements":"2.15.40","direct":true,"kind":"provided","optional":false},{"id":6906257051,"package_name":"com.amazonaws:aws-java-sdk-dynamodb","ecosystem":"maven","requirements":"1.11.914","direct":true,"kind":"provided","optional":false},{"id":6906257052,"package_name":"com.amazonaws:aws-lambda-java-events","ecosystem":"maven","requirements":"3.11.0","direct":true,"kind":"provided","optional":false},{"id":6906257053,"package_name":"org.junit.jupiter:junit-jupiter-engine","ecosystem":"maven","requirements":"5.7.0","direct":true,"kind":"test","optional":false}]},{"ecosystem":"maven","filepath":"aws-lambda-java-log4j2/pom.xml","sha":null,"kind":"manifest","created_at":"2023-01-14T21:00:45.837Z","updated_at":"2023-01-14T21:00:45.837Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/aws-lambda-java-log4j2/pom.xml","dependencies":[{"id":6906257637,"package_name":"com.amazonaws:aws-lambda-java-core","ecosystem":"maven","requirements":"1.2.1","direct":true,"kind":"runtime","optional":false},{"id":6906257638,"package_name":"org.apache.logging.log4j:log4j-core","ecosystem":"maven","requirements":"2.17.1","direct":true,"kind":"runtime","optional":false},{"id":6906257639,"package_name":"org.apache.logging.log4j:log4j-api","ecosystem":"maven","requirements":"2.17.1","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"maven","filepath":"aws-lambda-java-runtime-interface-client/pom.xml","sha":null,"kind":"manifest","created_at":"2023-01-14T21:00:45.869Z","updated_at":"2023-01-14T21:00:45.869Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/aws-lambda-java-runtime-interface-client/pom.xml","dependencies":[{"id":6906257660,"package_name":"com.amazonaws:aws-lambda-java-core","ecosystem":"maven","requirements":"1.2.1","direct":true,"kind":"runtime","optional":false},{"id":6906257661,"package_name":"com.amazonaws:aws-lambda-java-serialization","ecosystem":"maven","requirements":"1.0.0","direct":true,"kind":"runtime","optional":false},{"id":6906257662,"package_name":"org.junit.jupiter:junit-jupiter-engine","ecosystem":"maven","requirements":"5.7.0","direct":true,"kind":"test","optional":false},{"id":6906257663,"package_name":"org.junit.jupiter:junit-jupiter-api","ecosystem":"maven","requirements":"5.7.0","direct":true,"kind":"test","optional":false}]},{"ecosystem":"maven","filepath":"aws-lambda-java-runtime-interface-client/test/integration/test-handler/pom.xml","sha":null,"kind":"manifest","created_at":"2023-01-14T21:00:45.940Z","updated_at":"2023-01-14T21:00:45.940Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/aws-lambda-java-runtime-interface-client/test/integration/test-handler/pom.xml","dependencies":[{"id":6906257669,"package_name":"com.amazonaws:aws-lambda-java-runtime-interface-client","ecosystem":"maven","requirements":"2.1.1","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"maven","filepath":"aws-lambda-java-serialization/pom.xml","sha":null,"kind":"manifest","created_at":"2023-01-14T21:00:45.967Z","updated_at":"2023-01-14T21:00:45.967Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/aws-lambda-java-serialization/pom.xml","dependencies":[{"id":6906257689,"package_name":"com.fasterxml.jackson.core:jackson-databind","ecosystem":"maven","requirements":"2.13.4.1","direct":true,"kind":"runtime","optional":false},{"id":6906257690,"package_name":"com.google.code.gson:gson","ecosystem":"maven","requirements":"2.8.9","direct":true,"kind":"runtime","optional":false},{"id":6906257691,"package_name":"org.json:json","ecosystem":"maven","requirements":"20160810","direct":true,"kind":"runtime","optional":false},{"id":6906257692,"package_name":"org.junit.jupiter:junit-jupiter-engine","ecosystem":"maven","requirements":"5.9.1","direct":true,"kind":"test","optional":false},{"id":6906257693,"package_name":"org.junit.jupiter:junit-jupiter-params","ecosystem":"maven","requirements":"5.9.1","direct":true,"kind":"test","optional":false},{"id":6906257694,"package_name":"com.amazonaws:aws-lambda-java-events","ecosystem":"maven","requirements":"3.11.0","direct":true,"kind":"test","optional":false}]},{"ecosystem":"maven","filepath":"aws-lambda-java-tests/pom.xml","sha":null,"kind":"manifest","created_at":"2023-01-14T21:00:45.991Z","updated_at":"2023-01-14T21:00:45.991Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/aws-lambda-java-tests/pom.xml","dependencies":[{"id":6906257706,"package_name":"com.amazonaws:aws-lambda-java-serialization","ecosystem":"maven","requirements":"1.0.0","direct":true,"kind":"runtime","optional":false},{"id":6906257707,"package_name":"com.amazonaws:aws-lambda-java-events","ecosystem":"maven","requirements":"3.11.0","direct":true,"kind":"runtime","optional":false},{"id":6906257708,"package_name":"org.junit.jupiter:junit-jupiter-api","ecosystem":"maven","requirements":"5.7.0","direct":true,"kind":"runtime","optional":false},{"id":6906257709,"package_name":"org.junit.jupiter:junit-jupiter-engine","ecosystem":"maven","requirements":"5.7.0","direct":true,"kind":"runtime","optional":false},{"id":6906257710,"package_name":"org.junit.jupiter:junit-jupiter-params","ecosystem":"maven","requirements":"5.7.0","direct":true,"kind":"runtime","optional":false},{"id":6906257711,"package_name":"org.apache.commons:commons-lang3","ecosystem":"maven","requirements":"3.11","direct":true,"kind":"runtime","optional":false},{"id":6906257712,"package_name":"org.assertj:assertj-core","ecosystem":"maven","requirements":"3.18.1","direct":true,"kind":"test","optional":false}]},{"ecosystem":"maven","filepath":"samples/kinesis-firehose-event-handler/pom.xml","sha":null,"kind":"manifest","created_at":"2023-01-14T21:00:46.042Z","updated_at":"2023-01-14T21:00:46.042Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/samples/kinesis-firehose-event-handler/pom.xml","dependencies":[{"id":6906257716,"package_name":"com.amazonaws:aws-lambda-java-core","ecosystem":"maven","requirements":"1.2.1","direct":true,"kind":"runtime","optional":false},{"id":6906257717,"package_name":"com.amazonaws:aws-lambda-java-events","ecosystem":"maven","requirements":"3.11.0","direct":true,"kind":"runtime","optional":false},{"id":6906257718,"package_name":"org.junit.jupiter:junit-jupiter","ecosystem":"maven","requirements":"RELEASE","direct":true,"kind":"test","optional":false},{"id":6906257719,"package_name":"com.amazonaws:aws-lambda-java-tests","ecosystem":"maven","requirements":"1.1.1","direct":true,"kind":"test","optional":false}]},{"ecosystem":"maven","filepath":"aws-lambda-java-core/pom.xml","sha":null,"kind":"manifest","created_at":"2024-01-02T22:08:00.142Z","updated_at":"2024-01-02T22:08:00.142Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/aws-lambda-java-core/pom.xml","dependencies":[]},{"ecosystem":"maven","filepath":"samples/custom-serialization/gson/HelloWorldFunction/pom.xml","sha":null,"kind":"manifest","created_at":"2025-12-29T02:08:32.434Z","updated_at":"2025-12-29T02:08:32.434Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/samples/custom-serialization/gson/HelloWorldFunction/pom.xml","dependencies":[{"id":25780559638,"package_name":"com.amazonaws:aws-lambda-java-core","ecosystem":"maven","requirements":"1.2.3","direct":true,"kind":"runtime","optional":false},{"id":25780559639,"package_name":"com.amazonaws:aws-lambda-java-events","ecosystem":"maven","requirements":"3.16.0","direct":true,"kind":"runtime","optional":false},{"id":25780559640,"package_name":"com.google.code.gson:gson","ecosystem":"maven","requirements":"2.11.0","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"maven","filepath":"samples/custom-serialization/fastJson/HelloWorldFunction/pom.xml","sha":null,"kind":"manifest","created_at":"2025-12-29T02:08:31.818Z","updated_at":"2025-12-29T02:08:31.818Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/samples/custom-serialization/fastJson/HelloWorldFunction/pom.xml","dependencies":[{"id":25780559583,"package_name":"com.amazonaws:aws-lambda-java-core","ecosystem":"maven","requirements":"1.2.3","direct":true,"kind":"runtime","optional":false},{"id":25780559584,"package_name":"com.amazonaws:aws-lambda-java-events","ecosystem":"maven","requirements":"3.16.0","direct":true,"kind":"runtime","optional":false},{"id":25780559585,"package_name":"com.alibaba.fastjson2:fastjson2","ecosystem":"maven","requirements":"2.0.33","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"maven","filepath":"experimental/aws-lambda-java-profiler/integration_tests/helloworld/build.gradle","sha":null,"kind":"manifest","created_at":"2025-12-29T02:08:31.765Z","updated_at":"2025-12-29T02:08:31.765Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/experimental/aws-lambda-java-profiler/integration_tests/helloworld/build.gradle","dependencies":[{"id":25780559582,"package_name":"com.amazonaws:aws-lambda-java-core","ecosystem":"maven","requirements":"1.2.3","direct":true,"kind":"implementation","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/aws-lambda-java-profiler.yml","sha":null,"kind":"manifest","created_at":"2025-12-29T02:08:23.351Z","updated_at":"2025-12-29T02:08:23.351Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/.github/workflows/aws-lambda-java-profiler.yml","dependencies":[{"id":25780558718,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v5","direct":true,"kind":"composite","optional":false},{"id":25780558719,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false},{"id":25780558733,"package_name":"aws-actions/configure-aws-credentials","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false},{"id":25780558808,"package_name":"actions/upload-artifact","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"maven","filepath":"samples/custom-serialization/request-stream-handler/HelloWorldFunction/pom.xml","sha":null,"kind":"manifest","created_at":"2025-12-29T02:08:34.472Z","updated_at":"2025-12-29T02:08:34.472Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/samples/custom-serialization/request-stream-handler/HelloWorldFunction/pom.xml","dependencies":[{"id":25780559967,"package_name":"com.amazonaws:aws-lambda-java-core","ecosystem":"maven","requirements":"1.2.3","direct":true,"kind":"runtime","optional":false},{"id":25780559968,"package_name":"com.amazonaws:aws-lambda-java-events","ecosystem":"maven","requirements":"3.16.0","direct":true,"kind":"runtime","optional":false},{"id":25780559969,"package_name":"com.google.code.gson:gson","ecosystem":"maven","requirements":"2.10.1","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"maven","filepath":"experimental/aws-lambda-java-profiler/extension/build.gradle","sha":null,"kind":"manifest","created_at":"2025-12-29T02:08:30.692Z","updated_at":"2025-12-29T02:08:30.692Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/experimental/aws-lambda-java-profiler/extension/build.gradle","dependencies":[{"id":25780559510,"package_name":"com.amazonaws:aws-lambda-java-core","ecosystem":"maven","requirements":"1.2.3","direct":true,"kind":"implementation","optional":false},{"id":25780559511,"package_name":"com.amazonaws:aws-lambda-java-events","ecosystem":"maven","requirements":"3.11.5","direct":true,"kind":"implementation","optional":false},{"id":25780559512,"package_name":"tools.profiler:async-profiler","ecosystem":"maven","requirements":"3.0","direct":true,"kind":"implementation","optional":false},{"id":25780559524,"package_name":"software.amazon.awssdk:s3","ecosystem":"maven","requirements":"2.31.2","direct":true,"kind":"implementation","optional":false}]},{"ecosystem":"maven","filepath":"samples/custom-serialization/moshi/HelloWorldFunction/pom.xml","sha":null,"kind":"manifest","created_at":"2025-12-29T02:08:34.125Z","updated_at":"2025-12-29T02:08:34.125Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/samples/custom-serialization/moshi/HelloWorldFunction/pom.xml","dependencies":[{"id":25780559931,"package_name":"com.amazonaws:aws-lambda-java-core","ecosystem":"maven","requirements":"1.2.3","direct":true,"kind":"runtime","optional":false},{"id":25780559932,"package_name":"com.amazonaws:aws-lambda-java-events","ecosystem":"maven","requirements":"3.16.0","direct":true,"kind":"runtime","optional":false},{"id":25780559933,"package_name":"com.squareup.moshi:moshi","ecosystem":"maven","requirements":"1.15.1","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"maven","filepath":"experimental/aws-lambda-java-profiler/examples/cdk/pom.xml","sha":null,"kind":"manifest","created_at":"2025-12-29T02:08:26.069Z","updated_at":"2025-12-29T02:08:26.069Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/experimental/aws-lambda-java-profiler/examples/cdk/pom.xml","dependencies":[{"id":25780558932,"package_name":"software.amazon.awscdk:aws-cdk-lib","ecosystem":"maven","requirements":"2.155.0","direct":true,"kind":"runtime","optional":false},{"id":25780558956,"package_name":"software.constructs:constructs","ecosystem":"maven","requirements":"[10.0.0,11.0.0)","direct":true,"kind":"runtime","optional":false},{"id":25780559118,"package_name":"org.junit.jupiter:junit-jupiter","ecosystem":"maven","requirements":"5.7.1","direct":true,"kind":"test","optional":false}]},{"ecosystem":"maven","filepath":"experimental/aws-lambda-java-profiler/examples/function/profiling-example/pom.xml","sha":null,"kind":"manifest","created_at":"2025-12-29T02:08:28.841Z","updated_at":"2025-12-29T02:08:28.841Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/experimental/aws-lambda-java-profiler/examples/function/profiling-example/pom.xml","dependencies":[{"id":25780559156,"package_name":"com.amazonaws:aws-lambda-java-core","ecosystem":"maven","requirements":"1.2.2","direct":true,"kind":"runtime","optional":false},{"id":25780559353,"package_name":"com.amazonaws:aws-lambda-java-events","ecosystem":"maven","requirements":"3.11.0","direct":true,"kind":"runtime","optional":false},{"id":25780559372,"package_name":"com.hkupty.penna:penna-core","ecosystem":"maven","requirements":"0.8.0","direct":true,"kind":"runtime","optional":false},{"id":25780559397,"package_name":"org.slf4j:slf4j-api","ecosystem":"maven","requirements":"2.0.13","direct":true,"kind":"runtime","optional":false},{"id":25780559507,"package_name":"junit:junit","ecosystem":"maven","requirements":"4.13.2","direct":true,"kind":"test","optional":false}]},{"ecosystem":"maven","filepath":"samples/custom-serialization/jackson-jr/HelloWorldFunction/build.gradle","sha":null,"kind":"manifest","created_at":"2025-12-29T02:08:33.168Z","updated_at":"2025-12-29T02:08:33.168Z","repository_link":"https://github.com/aws/aws-lambda-java-libs/blob/main/samples/custom-serialization/jackson-jr/HelloWorldFunction/build.gradle","dependencies":[{"id":25780559823,"package_name":"com.amazonaws:aws-lambda-java-core","ecosystem":"maven","requirements":"1.2.3","direct":true,"kind":"implementation","optional":false},{"id":25780559824,"package_name":"com.amazonaws:aws-lambda-java-events","ecosystem":"maven","requirements":"3.14.0","direct":true,"kind":"implementation","optional":false},{"id":25780559825,"package_name":"com.fasterxml.jackson.jr:jackson-jr-objects","ecosystem":"maven","requirements":"2.15.2","direct":true,"kind":"implementation","optional":false},{"id":25780559912,"package_name":"com.fasterxml.jackson.jr:jackson-jr-annotation-support","ecosystem":"maven","requirements":"2.15.2","direct":true,"kind":"implementation","optional":false},{"id":25780559914,"package_name":"com.fasterxml.jackson.core:jackson-annotations","ecosystem":"maven","requirements":"2.15.2","direct":true,"kind":"implementation","optional":false}]}],"score":30.928063702286867,"created_at":"2025-05-07T18:58:24.176Z","updated_at":"2026-06-21T15:02:01.347Z","avatar_url":"https://github.com/aws.png","language":"C++","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/360492","html_url":"https://summary.ecosyste.ms/projects/360492"}