{"id":360599,"url":"https://github.com/aws/aws-xray-sdk-java","last_synced_at":"2026-06-21T13:30:32.695Z","repository":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-04-09T18:27:26.000Z","size":1321,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-05-03T07:10:44.246Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-04-09T18:27:29.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32950784,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-12T09:19:52.626Z","status":"ssl_error","status_checked_at":"2026-05-12T09:17:33.438Z","response_time":102,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"packages":[{"id":11855944,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-04-30T14:38:44.884Z","created_at":"2025-06-30T17:46:12.642Z","updated_at":"2026-04-30T14:38:44.884Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:50.074Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855932,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-bom","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-04-30T14:38:45.829Z","created_at":"2025-06-30T17:46:12.459Z","updated_at":"2026-04-30T14:38:45.829Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-bom/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-bom/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:35.830Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-bom","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-bom","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-bom","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-bom/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-bom/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-bom/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-bom/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-bom/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-bom/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-bom/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4652973,"name":"com.amazonaws:aws-xray-auto-instrumentation-agent-installer","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":2,"first_release_published_at":"2019-12-02T17:00:32.000Z","latest_release_published_at":"2019-12-02T22:53:12.000Z","latest_release_number":"2.4.0-beta.1","last_synced_at":"2026-04-26T11:08:57.704Z","created_at":"2022-07-25T16:39:28.680Z","updated_at":"2026-04-26T11:08:57.704Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-auto-instrumentation-agent-installer/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-auto-instrumentation-agent-installer/","metadata":{"distribution_repositories":["https://aws.oss.sonatype.org/service/local/staging/deploy/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:35.129Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":48.85985838769028,"stargazers_count":19.895747015969004,"forks_count":13.395184218393549,"average":28.532683390750055},"purl":"pkg:maven/com.amazonaws/aws-xray-auto-instrumentation-agent-installer","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-auto-instrumentation-agent-installer","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-auto-instrumentation-agent-installer","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-auto-instrumentation-agent-installer/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-installer/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-installer/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-installer/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-installer/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-installer/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-installer/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5080065,"name":"com.amazonaws:aws-xray-recorder-sdk-core","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":50,"first_release_published_at":"2016-12-01T11:55:08.000Z","latest_release_published_at":"2026-03-30T16:48:38.000Z","latest_release_number":"2.21.0","last_synced_at":"2026-04-30T14:38:46.609Z","created_at":"2022-07-28T18:40:41.121Z","updated_at":"2026-04-30T14:38:46.609Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-core/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-core/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:34.052Z","dependent_packages_count":52,"downloads":null,"downloads_period":null,"dependent_repos_count":271,"rankings":{"downloads":null,"dependent_repos_count":0.9391382355414762,"dependent_packages_count":1.3310131879838365,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":1.4410023946628652,"average":10.196849761863486},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-core","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-core","docker_dependents_count":19,"docker_downloads_count":3745621,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-core","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-core/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-core/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-core/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-core/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-core/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-core/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-core/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4760609,"name":"com.amazonaws:aws-xray-recorder-sdk-slf4j","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":28,"first_release_published_at":"2019-11-21T20:33:09.000Z","latest_release_published_at":"2025-10-01T21:57:39.000Z","latest_release_number":"2.20.0","last_synced_at":"2026-04-30T14:38:49.723Z","created_at":"2022-07-26T03:29:44.846Z","updated_at":"2026-04-30T14:38:49.723Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-slf4j/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-slf4j/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:35.242Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":6,"rankings":{"downloads":null,"dependent_repos_count":10.025951453161232,"dependent_packages_count":32.9817739099789,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":null,"average":22.570205088567345},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-slf4j","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-slf4j","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-slf4j","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-slf4j/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-slf4j/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-slf4j/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-slf4j/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-slf4j/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-slf4j/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-slf4j/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855937,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-core","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-04-30T14:38:50.480Z","created_at":"2025-06-30T17:46:12.509Z","updated_at":"2026-04-30T14:38:50.481Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-core/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-core/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:44.223Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-core","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-core","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-core","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-core/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-core/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-core/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-core/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-core/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-core/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-core/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855941,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-core","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-03-23T07:02:22.091Z","created_at":"2025-06-30T17:46:12.586Z","updated_at":"2026-03-23T07:04:45.134Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk-core/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk-core/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:45.134Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk-core","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-core","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-core","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-core/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-core/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-core/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-core/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-core/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-core/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-core/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5425211,"name":"com.amazonaws:aws-xray-recorder-sdk-lambda","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":15,"first_release_published_at":"2022-10-10T20:09:47.000Z","latest_release_published_at":"2025-10-01T21:57:39.000Z","latest_release_number":"2.20.0","last_synced_at":"2026-04-30T14:38:50.588Z","created_at":"2022-11-15T18:46:09.682Z","updated_at":"2026-04-30T14:38:50.589Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-lambda/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-lambda/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:49.713Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":31.998402898858956,"stargazers_count":20.10080196146492,"forks_count":13.828167165927974,"average":24.47682899179981},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-lambda","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-lambda","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-lambda","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-lambda/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-lambda/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-lambda/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-lambda/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-lambda/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-lambda/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-lambda/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4652972,"name":"com.amazonaws:aws-xray-auto-instrumentation-agent-runtime","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":2,"first_release_published_at":"2019-12-02T17:00:26.000Z","latest_release_published_at":"2019-12-02T22:53:05.000Z","latest_release_number":"2.4.0-beta.1","last_synced_at":"2026-04-30T14:38:50.768Z","created_at":"2022-07-25T16:39:28.567Z","updated_at":"2026-04-30T14:38:50.768Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-auto-instrumentation-agent-runtime/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-auto-instrumentation-agent-runtime/","metadata":{"distribution_repositories":["https://aws.oss.sonatype.org/service/local/staging/deploy/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:49.723Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":48.85985838769028,"stargazers_count":19.895747015969004,"forks_count":13.395184218393549,"average":28.532683390750055},"purl":"pkg:maven/com.amazonaws/aws-xray-auto-instrumentation-agent-runtime","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-auto-instrumentation-agent-runtime","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-auto-instrumentation-agent-runtime","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-auto-instrumentation-agent-runtime/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-runtime/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-runtime/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-runtime/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-runtime/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-runtime/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-runtime/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4653004,"name":"com.amazonaws:aws-xray-recorder-sdk-apache-http","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":49,"first_release_published_at":"2016-12-01T11:55:15.000Z","latest_release_published_at":"2025-10-01T21:57:39.000Z","latest_release_number":"2.20.0","last_synced_at":"2026-05-02T14:47:14.328Z","created_at":"2022-07-25T16:39:42.734Z","updated_at":"2026-05-02T14:47:14.328Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-apache-http/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-apache-http/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:49.878Z","dependent_packages_count":6,"downloads":null,"downloads_period":null,"dependent_repos_count":308,"rankings":{"downloads":null,"dependent_repos_count":0.8554367893887391,"dependent_packages_count":9.706364113305325,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":5.483245693780862,"average":12.663628317520836},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-apache-http","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-apache-http","docker_dependents_count":8,"docker_downloads_count":119,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-apache-http","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-apache-http/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-apache-http/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-apache-http/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-apache-http/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-apache-http/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-apache-http/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-apache-http/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855942,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-log4j","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-04-27T01:47:28.043Z","created_at":"2025-06-30T17:46:12.588Z","updated_at":"2026-04-27T01:47:28.043Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-log4j/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-log4j/","metadata":{},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:50.149Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-log4j","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-log4j","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-log4j","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-log4j/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-log4j/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-log4j/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-log4j/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-log4j/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-log4j/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-log4j/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5080082,"name":"com.amazonaws:aws-xray-recorder-sdk-aws-sdk-instrumentor","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":50,"first_release_published_at":"2016-12-01T11:55:29.000Z","latest_release_published_at":"2026-03-30T16:48:38.000Z","latest_release_number":"2.21.0","last_synced_at":"2026-04-24T05:02:06.884Z","created_at":"2022-07-28T18:42:55.963Z","updated_at":"2026-04-24T05:02:06.885Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-aws-sdk-instrumentor/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-aws-sdk-instrumentor/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:45.691Z","dependent_packages_count":24,"downloads":null,"downloads_period":null,"dependent_repos_count":74,"rankings":{"downloads":null,"dependent_repos_count":2.377881992975486,"dependent_packages_count":2.704407300918622,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":6.537122993067598,"average":11.778501455618192},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-aws-sdk-instrumentor","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-instrumentor","docker_dependents_count":1,"docker_downloads_count":12,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-instrumentor","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-instrumentor/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-instrumentor/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-instrumentor/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-instrumentor/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-instrumentor/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-instrumentor/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-instrumentor/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4760606,"name":"com.amazonaws:aws-xray-auto-instrumentation-agent-pom","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":2,"first_release_published_at":"2019-12-02T16:59:04.000Z","latest_release_published_at":"2019-12-02T22:51:23.000Z","latest_release_number":"2.4.0-beta.1","last_synced_at":"2026-04-24T10:55:43.414Z","created_at":"2022-07-26T03:29:40.868Z","updated_at":"2026-04-24T10:55:43.414Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-auto-instrumentation-agent-pom/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-auto-instrumentation-agent-pom/","metadata":{"distribution_repositories":["https://aws.oss.sonatype.org/service/local/staging/deploy/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:50.194Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":48.85985838769028,"stargazers_count":19.895747015969004,"forks_count":13.395184218393549,"average":28.532683390750055},"purl":"pkg:maven/com.amazonaws/aws-xray-auto-instrumentation-agent-pom","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-auto-instrumentation-agent-pom","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-auto-instrumentation-agent-pom","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-auto-instrumentation-agent-pom/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-pom/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-pom/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-pom/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-pom/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-pom/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-pom/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5029397,"name":"com.amazonaws:aws-xray-recorder-sdk-aws-sdk-core","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":32,"first_release_published_at":"2019-02-07T22:45:12.000Z","latest_release_published_at":"2026-03-30T16:48:38.000Z","latest_release_number":"2.21.0","last_synced_at":"2026-04-24T10:56:27.614Z","created_at":"2022-07-27T15:12:10.198Z","updated_at":"2026-04-24T10:56:27.614Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-aws-sdk-core/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-aws-sdk-core/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:33.865Z","dependent_packages_count":7,"downloads":null,"downloads_period":null,"dependent_repos_count":147,"rankings":{"downloads":null,"dependent_repos_count":1.463827776487454,"dependent_packages_count":8.396977136289182,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":6.537122993067598,"average":12.734204579394696},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-aws-sdk-core","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-core","docker_dependents_count":1,"docker_downloads_count":12,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-core","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-core/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-core/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-core/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-core/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-core/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-core/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-core/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855933,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-metrics","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-04-24T10:56:36.723Z","created_at":"2025-06-30T17:46:12.461Z","updated_at":"2026-04-24T10:56:36.723Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-metrics/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-metrics/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:33.584Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-metrics","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-metrics","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-metrics","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-metrics/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-metrics/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-metrics/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-metrics/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-metrics/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-metrics/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-metrics/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855934,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-slf4j","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-04-24T10:55:39.170Z","created_at":"2025-06-30T17:46:12.469Z","updated_at":"2026-04-24T10:55:39.170Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-slf4j/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-slf4j/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:40.903Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-slf4j","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-slf4j","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-slf4j","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-slf4j/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-slf4j/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-slf4j/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-slf4j/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-slf4j/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-slf4j/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-slf4j/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855945,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-postgres","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-04-30T08:03:09.805Z","created_at":"2025-06-30T17:46:12.708Z","updated_at":"2026-04-30T08:03:09.805Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-sql-postgres/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-sql-postgres/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:35.790Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-sql-postgres","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-postgres","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-postgres","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-postgres/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-postgres/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-postgres/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-postgres/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-postgres/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-postgres/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-postgres/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855931,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-lambda","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-04-24T10:58:37.906Z","created_at":"2025-06-30T17:46:12.451Z","updated_at":"2026-04-24T10:58:37.907Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-lambda/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-lambda/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:33.860Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-lambda","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-lambda","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-lambda","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-lambda/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-lambda/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-lambda/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-lambda/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-lambda/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-lambda/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-lambda/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855930,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-04-24T10:59:18.986Z","created_at":"2025-06-30T17:46:12.400Z","updated_at":"2026-04-24T10:59:18.986Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-sql/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-sql/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:33.866Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-sql","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4652976,"name":"com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":32,"first_release_published_at":"2019-02-07T22:50:17.000Z","latest_release_published_at":"2026-03-30T16:48:38.000Z","latest_release_number":"2.21.0","last_synced_at":"2026-04-24T10:56:38.482Z","created_at":"2022-07-25T16:39:30.105Z","updated_at":"2026-04-24T10:56:38.483Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:33.588Z","dependent_packages_count":30,"downloads":null,"downloads_period":null,"dependent_repos_count":141,"rankings":{"downloads":null,"dependent_repos_count":1.513834767738499,"dependent_packages_count":2.1806248548385807,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":null,"average":12.741888653426583},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-aws-sdk-v2-instrumentor","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4760610,"name":"com.amazonaws:aws-xray-recorder-sdk-sql-mysql","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":49,"first_release_published_at":"2016-12-01T11:55:37.000Z","latest_release_published_at":"2025-10-01T21:57:39.000Z","latest_release_number":"2.20.0","last_synced_at":"2026-04-30T14:38:48.956Z","created_at":"2022-07-26T03:29:48.557Z","updated_at":"2026-04-30T14:38:48.956Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-sql-mysql/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-sql-mysql/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:34.380Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":15,"rankings":{"downloads":null,"dependent_repos_count":6.293027148904471,"dependent_packages_count":32.9817739099789,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":6.537122993067598,"average":18.617003808616044},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-sql-mysql","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-sql-mysql","docker_dependents_count":1,"docker_downloads_count":12,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-sql-mysql","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-sql-mysql/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql-mysql/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql-mysql/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql-mysql/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql-mysql/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql-mysql/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql-mysql/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855935,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-04-27T16:02:42.111Z","created_at":"2025-06-30T17:46:12.474Z","updated_at":"2026-04-27T16:02:42.112Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk-v2/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk-v2/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:34.383Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk-v2","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855940,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-04-27T20:47:34.813Z","created_at":"2025-06-30T17:46:12.573Z","updated_at":"2026-04-27T20:47:34.813Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:34.378Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk-v2-instrumentor","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855943,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-apache-http","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-04-27T22:16:34.326Z","created_at":"2025-06-30T17:46:12.593Z","updated_at":"2026-04-27T22:16:34.326Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-apache-http/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-apache-http/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:48.431Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-apache-http","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-apache-http","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-apache-http","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-apache-http/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-apache-http/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-apache-http/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-apache-http/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-apache-http/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-apache-http/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-apache-http/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855936,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-instrumentor","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-05-01T07:02:26.115Z","created_at":"2025-06-30T17:46:12.498Z","updated_at":"2026-05-01T07:02:26.115Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk-instrumentor/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk-instrumentor/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:46.973Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk-instrumentor","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-instrumentor","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-instrumentor","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-instrumentor/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-instrumentor/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-instrumentor/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-instrumentor/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-instrumentor/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-instrumentor/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-instrumentor/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4652979,"name":"com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":32,"first_release_published_at":"2019-02-07T22:50:05.000Z","latest_release_published_at":"2026-03-30T16:48:38.000Z","latest_release_number":"2.21.0","last_synced_at":"2026-04-22T10:24:54.012Z","created_at":"2022-07-25T16:39:32.212Z","updated_at":"2026-04-22T10:24:54.012Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-aws-sdk-v2/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-aws-sdk-v2/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:16.049Z","dependent_packages_count":14,"downloads":null,"downloads_period":null,"dependent_repos_count":258,"rankings":{"downloads":null,"dependent_repos_count":0.9809889586178449,"dependent_packages_count":4.473221544511948,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":null,"average":13.18182637356476},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-aws-sdk-v2","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4652996,"name":"com.amazonaws:aws-xray-recorder-sdk-log4j","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":29,"first_release_published_at":"2019-11-21T20:33:14.000Z","latest_release_published_at":"2026-03-30T16:48:38.000Z","latest_release_number":"2.21.0","last_synced_at":"2026-04-22T10:25:06.608Z","created_at":"2022-07-25T16:39:40.355Z","updated_at":"2026-04-22T10:25:06.609Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-log4j/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-log4j/","metadata":{},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:27.884Z","dependent_packages_count":3,"downloads":null,"downloads_period":null,"dependent_repos_count":5,"rankings":{"downloads":null,"dependent_repos_count":10.913226830919074,"dependent_packages_count":17.562685975402186,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":null,"average":18.93725194936263},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-log4j","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-log4j","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-log4j","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-log4j/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-log4j/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-log4j/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-log4j/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-log4j/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-log4j/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-log4j/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4653014,"name":"com.amazonaws:aws-xray-recorder-sdk-spring","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":37,"first_release_published_at":"2018-01-04T00:34:31.000Z","latest_release_published_at":"2026-03-30T16:48:38.000Z","latest_release_number":"2.21.0","last_synced_at":"2026-04-22T10:25:12.031Z","created_at":"2022-07-25T16:39:46.174Z","updated_at":"2026-04-22T10:25:12.032Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-spring/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-spring/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:27.826Z","dependent_packages_count":28,"downloads":null,"downloads_period":null,"dependent_repos_count":187,"rankings":{"downloads":null,"dependent_repos_count":1.2250848027809706,"dependent_packages_count":2.335597184068684,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":4.91466510759965,"average":11.149688417115712},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-spring","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-spring","docker_dependents_count":15,"docker_downloads_count":342,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-spring","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-spring/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-spring/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-spring/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-spring/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-spring/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-spring/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-spring/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4773826,"name":"com.amazonaws:aws-xray-auto-instrumentation-agent-bootstrap","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":2,"first_release_published_at":"2019-12-02T16:59:20.000Z","latest_release_published_at":"2019-12-02T22:51:41.000Z","latest_release_number":"2.4.0-beta.1","last_synced_at":"2026-04-22T10:25:18.236Z","created_at":"2022-07-26T07:57:44.771Z","updated_at":"2026-04-22T10:25:18.236Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-auto-instrumentation-agent-bootstrap/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-auto-instrumentation-agent-bootstrap/","metadata":{"distribution_repositories":["https://aws.oss.sonatype.org/service/local/staging/deploy/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:30.304Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":31.998402898858956,"stargazers_count":19.895747015969004,"forks_count":13.395184218393549,"average":24.317319518542224},"purl":"pkg:maven/com.amazonaws/aws-xray-auto-instrumentation-agent-bootstrap","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-auto-instrumentation-agent-bootstrap","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-auto-instrumentation-agent-bootstrap","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-auto-instrumentation-agent-bootstrap/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-bootstrap/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-bootstrap/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-bootstrap/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-bootstrap/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-bootstrap/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-bootstrap/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4653002,"name":"com.amazonaws:aws-xray-recorder-sdk-metrics","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":29,"first_release_published_at":"2019-11-21T20:33:20.000Z","latest_release_published_at":"2026-03-30T16:48:38.000Z","latest_release_number":"2.21.0","last_synced_at":"2026-04-22T10:25:17.440Z","created_at":"2022-07-25T16:39:42.383Z","updated_at":"2026-04-22T10:25:17.441Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-metrics/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-metrics/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:30.302Z","dependent_packages_count":3,"downloads":null,"downloads_period":null,"dependent_repos_count":2,"rankings":{"downloads":null,"dependent_repos_count":16.11232814170775,"dependent_packages_count":17.562685975402186,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":null,"average":20.237027277059795},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-metrics","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-metrics","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-metrics","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-metrics/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-metrics/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-metrics/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-metrics/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-metrics/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-metrics/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-metrics/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4653012,"name":"com.amazonaws:aws-xray-recorder-sdk-bom","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":50,"first_release_published_at":"2016-12-01T11:55:32.000Z","latest_release_published_at":"2026-03-30T16:48:38.000Z","latest_release_number":"2.21.0","last_synced_at":"2026-04-22T10:25:35.572Z","created_at":"2022-07-25T16:39:45.489Z","updated_at":"2026-04-22T10:25:35.572Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-bom/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-bom/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:30.302Z","dependent_packages_count":8,"downloads":null,"downloads_period":null,"dependent_repos_count":67,"rankings":{"downloads":null,"dependent_repos_count":2.5346720224912596,"dependent_packages_count":7.463445696183775,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":null,"average":14.317803177451072},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-bom","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-bom","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-bom","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-bom/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-bom/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-bom/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-bom/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-bom/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-bom/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-bom/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4652991,"name":"com.amazonaws:aws-xray-recorder-sdk-aws-sdk","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":50,"first_release_published_at":"2016-12-01T11:55:24.000Z","latest_release_published_at":"2026-03-30T16:48:38.000Z","latest_release_number":"2.21.0","last_synced_at":"2026-04-22T10:25:41.761Z","created_at":"2022-07-25T16:39:37.463Z","updated_at":"2026-04-22T10:25:41.761Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-aws-sdk/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-aws-sdk/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:32.997Z","dependent_packages_count":26,"downloads":null,"downloads_period":null,"dependent_repos_count":113,"rankings":{"downloads":null,"dependent_repos_count":1.787766773329275,"dependent_packages_count":2.506638045310917,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":6.537122993067598,"average":11.620924560567408},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-aws-sdk","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk","docker_dependents_count":1,"docker_downloads_count":12,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855939,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-mysql","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-04-22T10:25:41.617Z","created_at":"2025-06-30T17:46:12.533Z","updated_at":"2026-04-22T10:25:41.617Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-sql-mysql/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-sql-mysql/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:30.311Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-sql-mysql","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-mysql","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-mysql","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-mysql/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-mysql/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-mysql/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-mysql/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-mysql/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-mysql/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-mysql/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4653006,"name":"com.amazonaws:aws-xray-recorder-sdk-sql-postgres","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":50,"first_release_published_at":"2016-12-01T11:55:45.000Z","latest_release_published_at":"2026-03-30T16:48:38.000Z","latest_release_number":"2.21.0","last_synced_at":"2026-04-22T10:25:42.940Z","created_at":"2022-07-25T16:39:43.455Z","updated_at":"2026-04-22T10:25:42.940Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-sql-postgres/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-sql-postgres/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:33.584Z","dependent_packages_count":2,"downloads":null,"downloads_period":null,"dependent_repos_count":9,"rankings":{"downloads":null,"dependent_repos_count":8.211352158816485,"dependent_packages_count":23.155264180186386,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":6.537122993067598,"average":17.035366864639947},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-sql-postgres","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-sql-postgres","docker_dependents_count":1,"docker_downloads_count":12,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-sql-postgres","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-sql-postgres/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql-postgres/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql-postgres/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql-postgres/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql-postgres/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql-postgres/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql-postgres/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4653005,"name":"com.amazonaws:aws-xray-recorder-sdk-pom","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":25,"first_release_published_at":"2016-12-01T11:54:52.000Z","latest_release_published_at":"2020-06-21T05:17:10.000Z","latest_release_number":"2.6.1","last_synced_at":"2026-04-22T10:25:44.364Z","created_at":"2022-07-25T16:39:43.160Z","updated_at":"2026-04-22T10:25:44.365Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-pom/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-pom/","metadata":{"distribution_repositories":["https://aws.oss.sonatype.org/service/local/staging/deploy/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:33.584Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":48.85985838769028,"stargazers_count":19.895747015969004,"forks_count":13.395184218393549,"average":28.532683390750055},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-pom","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-pom","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-pom","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-pom/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-pom/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-pom/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-pom/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-pom/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-pom/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-pom/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855938,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-spring","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-04-28T12:19:25.669Z","created_at":"2025-06-30T17:46:12.516Z","updated_at":"2026-04-28T12:19:25.669Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-spring/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-spring/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:35.131Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-spring","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-spring","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-spring","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-spring/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-spring/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-spring/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-spring/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-spring/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-spring/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-spring/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4652987,"name":"com.amazonaws:aws-xray-recorder-sdk-sql","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":29,"first_release_published_at":"2019-11-21T20:32:28.000Z","latest_release_published_at":"2026-03-30T16:48:38.000Z","latest_release_number":"2.21.0","last_synced_at":"2026-04-28T12:19:26.157Z","created_at":"2022-07-25T16:39:35.840Z","updated_at":"2026-04-28T12:19:26.157Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-sql/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-sql/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-03-20T17:01:23.000Z","size":1325,"stargazers_count":99,"open_issues_count":78,"forks_count":99,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-22T17:54:46.618Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-03-20T17:01:26.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"64196f25-c931-4a01-94fc-8a22e8be05cc","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":38,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30852199,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-23T06:36:05.369Z","status":"ssl_error","status_checked_at":"2026-03-23T06:36:00.499Z","response_time":59,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-23T07:04:44.224Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":7,"rankings":{"downloads":null,"dependent_repos_count":9.291861736424547,"dependent_packages_count":32.9817739099789,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":null,"average":22.386682659383176},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-sql","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-sql","docker_dependents_count":1,"docker_downloads_count":210,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-sql","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-sql/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-20T06:01:38.335Z","issues_count":66,"pull_requests_count":117,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":254443.37962962964,"issues_closed_count":25,"pull_requests_closed_count":108,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5897435897435898,"merged_pull_requests_count":99,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":576813.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":16,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13636363636363635,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":13,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":604697,"maintainers_count":0,"namespaces_count":79339,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39644},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-04-03T06:29:38.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}}],"commits":{"id":2209276,"full_name":"aws/aws-xray-sdk-java","default_branch":"master","total_commits":299,"total_committers":62,"total_bot_commits":0,"total_bot_committers":0,"mean_commits":4.82258064516129,"dds":0.842809364548495,"past_year_total_commits":25,"past_year_total_committers":6,"past_year_total_bot_commits":0,"past_year_total_bot_committers":0,"past_year_mean_commits":4.166666666666667,"past_year_dds":0.6799999999999999,"last_synced_at":"2026-05-02T13:14:37.782Z","last_synced_commit":"6bcfc4156fa158c05fb7a6fe12a07f31e2e26848","created_at":"2024-10-03T21:06:12.910Z","updated_at":"2026-05-02T13:12:11.393Z","committers":[{"name":"William Armiros","email":"54150514+willarmiros","login":"willarmiros","count":47},{"name":"Anuraag Agrawal","email":"aanuraag@amazon.co.jp","login":null,"count":40},{"name":"atshaw43","email":"108552302+atshaw43","login":"atshaw43","count":15},{"name":"Prashant Srivastava","email":"50466688+srprash","login":"srprash","count":15},{"name":"Jeffery Saeteurn","email":"cssaete@amazon.com","login":"chanchiem","count":15},{"name":"William Armiros","email":"armiros@amazon.com","login":null,"count":11},{"name":"Jonathan Lee","email":"107072447+jj22ee","login":"jj22ee","count":9},{"name":"Thomas Pierce","email":"thp@amazon.com","login":"thpierce","count":9},{"name":"Wu","email":"haotianw@amazon.com","login":"haotianw465","count":9},{"name":"Christopher Radek","email":"cjradek@gmail.com","login":"chrisradek","count":8},{"name":"Lei Wang","email":"66336933+wangzlei","login":"wangzlei","count":8},{"name":"Mahad Janjua","email":"134644284+majanjua-amzn","login":"majanjua-amzn","count":8},{"name":"Zhao","email":"luluzhao@amazon.com","login":"luluzhao","count":8},{"name":"Bhautik Pipaliya","email":"56270044+bhautikpip","login":"bhautikpip","count":7},{"name":"James Bowman","email":"jamebowm@amazon.com","login":"jamesdbowman","count":6},{"name":"Michael Lee","email":"michl@amazon.com","login":"c1tadel","count":6},{"name":"Eric Zhang","email":"eric.zhang6811@gmail.com","login":"ezhang6811","count":5},{"name":"Scott Chamberlain","email":"chamsco@amazon.com","login":"chamsco-aws","count":5},{"name":"Shengxin Li","email":"shengxil@amazon.com","login":"shengxil","count":5},{"name":"Steven Aerts","email":"steven.aerts@technicolor.com","login":"steven-aerts","count":5},{"name":"Kurru","email":"thekurru@gmail.com","login":"Kurru","count":4},{"name":"Andrew Powell","email":"andy.powell@mac.com","login":"andrewpowell","count":3},{"name":"Luke (GuangHui) Zhang","email":"lukezha@amazon.com","login":"lukeina2z","count":3},{"name":"richard hernandez","email":"47188332+rhernandez35","login":"rhernandez35","count":3},{"name":"Yogiraj Awati","email":"awati@amazon.com","login":null,"count":2},{"name":"Dekel Pilli","email":"dekelpilli@gmail.com","login":"dekelpilli","count":2},{"name":"Mark Sailes","email":"45629314+msailes","login":"msailes","count":2},{"name":"Michael Ennen","email":"brcolow","login":"brcolow","count":2},{"name":"Ramiro Aparicio","email":"rapariciog@gmail.com","login":"friscoMad","count":2},{"name":"Lu Peng","email":"61207760+lupengamzn","login":"lupengamzn","count":2},{"name":"Vastin","email":"3690049+vastin","login":"vastin","count":2},{"name":"Mike Friesen","email":"mfriesen@gmail.com","login":"mfriesen","count":1},{"name":"Nathaniel Ruiz Nowell","email":"enruizno@uwaterloo.ca","login":"NathanielRN","count":1},{"name":"Rohit Nair","email":"rohitnair5@gmail.com","login":"rohitnair","count":1},{"name":"Rudy Alvarez","email":"rudygt@gmail.com","login":"rudygt","count":1},{"name":"Srikant Sistla","email":"26775228+ss2305","login":"ss2305","count":1},{"name":"Stefan Norberg","email":"stefan@norberg.org","login":"stnor","count":1},{"name":"Steve Peters","email":"steve@fisharerojo.org","login":"smpeters","count":1},{"name":"chang-chao","email":"chang-chao@hotmail.com","login":"chang-chao","count":1},{"name":"kwalczak","email":"kwalczak","login":"kwalczak","count":1},{"name":"manofthepeace","email":"13215031+manofthepeace","login":"manofthepeace","count":1},{"name":"tsuttsu305","email":"shinichi.tsuji@asia-quest.jp","login":null,"count":1},{"name":"Mike Waters","email":"mike.waters@digitalglobe.com","login":null,"count":1},{"name":"Algae666","email":"algae@apple.com","login":null,"count":1},{"name":"mwunderl","email":"mwunderl@amazon.com","login":"mwunderl","count":1},{"name":"productivityindustries","email":"65662367+productivityindustries","login":"productivityindustries","count":1},{"name":"zzhlogin","email":"zzhlogin@amazon.com","login":"zzhlogin","count":1},{"name":"Liu, Zhengyang","email":"zhengyal@amazon.com","login":"zhengyal","count":1},{"name":"Kaushal Partani","email":"partani@amazon.com","login":"aws-kaushal-partani","count":1},{"name":"John Knollmeyer","email":"jknollm@amazon.com","login":"jknollmeyer","count":1},{"name":"Jared Hatfield","email":"jjhatf02@gmail.com","login":"JaredHatfield","count":1},{"name":"Jagveer Loky","email":"jagveer.loky@gmail.com","login":"jagveer-loky","count":1},{"name":"Jacob Peddicord","email":"jpeddicord","login":"jpeddicord","count":1},{"name":"Henri Yandell","email":"hyandell","login":"hyandell","count":1},{"name":"Guy Lichtman","email":"1395797+glicht","login":"glicht","count":1},{"name":"Evgeniy Sokolov","email":"evgeniy.sokolov@gmail.com","login":"eugine","count":1},{"name":"David Venable","email":"david@venable.io","login":"dlvenable","count":1},{"name":"Ashley Mercer","email":"13454082+ashleymercer","login":"ashleymercer","count":1},{"name":"Anuraag Agrawal","email":"anuraaga@gmail.com","login":"anuraaga","count":1},{"name":"Ahmed Kamel","email":"humanzz@hotmail.com","login":"humanzz","count":1},{"name":"Adrian Cole","email":"adriancole","login":"adriancole","count":1},{"name":"Aapo Laitinen","email":"aapo@amazon.com","login":"aapolait","count":1}],"past_year_committers":[{"name":"Thomas Pierce","email":"thp@amazon.com","login":"thpierce","count":8},{"name":"Jonathan Lee","email":"107072447+jj22ee","login":"jj22ee","count":6},{"name":"Eric Zhang","email":"eric.zhang6811@gmail.com","login":"ezhang6811","count":5},{"name":"Luke (GuangHui) Zhang","email":"lukezha@amazon.com","login":"lukeina2z","count":3},{"name":"Prashant Srivastava","email":"50466688+srprash","login":"srprash","count":2},{"name":"Vastin","email":"3690049+vastin","login":"vastin","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-05-06T00:00:09.465Z","repositories_count":6229362,"commits_count":897204950,"contributors_count":34916276,"owners_count":1149683,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"aws/aws-xray-sdk-java","html_url":"https://github.com/aws/aws-xray-sdk-java","last_synced_at":"2026-04-22T08:01:31.069Z","status":"active","issues_count":66,"pull_requests_count":120,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":248399.43243243243,"issues_closed_count":25,"pull_requests_closed_count":111,"pull_request_authors_count":26,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.575,"merged_pull_requests_count":102,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":548236.5882352941,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":17,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.13043478260869565,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":14,"created_at":"2023-05-15T09:20:28.961Z","updated_at":"2026-04-22T08:01:31.069Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","issue_labels_count":{"table":{"enhancement":13,"bug":4,"question":3,"pending release":2,"feature request":1,"documentation":1}},"pull_request_labels_count":{"table":{"bug":2,"pending release":1}},"issue_author_associations_count":{"table":{"NONE":54,"CONTRIBUTOR":12}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":115,"NONE":5}},"issue_authors":{"table":{"kjhok1811":3,"feizhangyong":3,"Kurru":2,"gautam-nutalapati":2,"smoell":2,"xendo":2,"ygrenzinger":1,"Swish4114":1,"digithead1011":1,"verbitan":1,"chaitanguttarlapalli":1,"HamzaOralK":1,"girotomas":1,"jakubgruber":1,"Ftwpker":1,"narras-oss":1,"aajtodd":1,"millems":1,"oleksandr-skoryi":1,"IDUN-BogdanPi":1,"Morras":1,"minstack":1,"humanzz":1,"aws-kj":1,"dyang108":1,"NathanielRN":1,"isururandika":1,"piotrmackowiak":1,"ramkumar-mn":1,"ambethell":1,"chanchiem":1,"lishenwp":1,"scottgerring":1,"Ale0x78":1,"epomatti":1,"task4233":1,"wangzlei":1,"yogiraj07":1,"productivityindustries":1,"PiotrWu":1,"FieryCod":1,"balaravichandran097":1,"FrontierPsychiatrist":1,"shearn89":1,"lucaas-webpi":1,"ashleymercer":1,"Zhenye-Na":1,"MostafaaRamadan":1,"andreas-trvlk":1,"factorypoint":1,"shengxil":1,"jeroenvandevelde":1,"willarmiros":1,"bvingerh":1,"copumpkin":1,"kimor79":1,"jj22ee":1,"NoMemoryError":1}},"pull_request_authors":{"table":{"atshaw43":18,"srprash":16,"majanjua-amzn":15,"jj22ee":13,"willarmiros":9,"wangzlei":9,"thpierce":7,"vastin":5,"Kurru":4,"anuraaga":3,"bhautikpip":2,"lukeina2z":2,"ezhang6811":2,"zzhlogin":2,"msailes":2,"brcolow":1,"humanzz":1,"hden":1,"rohitnair":1,"lupengamzn":1,"productivityindustries":1,"NathanielRN":1,"eugine":1,"jagveer-loky":1,"manofthepeace":1,"rudygt":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-05-06T00:00:09.865Z","repositories_count":14518682,"issues_count":34233365,"pull_requests_count":112193036,"authors_count":11255994,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{}},"past_year_pull_request_labels_count":{"table":{}},"past_year_issue_author_associations_count":{"table":{"CONTRIBUTOR":1,"NONE":1}},"past_year_pull_request_author_associations_count":{"table":{"CONTRIBUTOR":22,"NONE":1}},"past_year_issue_authors":{"table":{"jj22ee":1,"minstack":1}},"past_year_pull_request_authors":{"table":{"jj22ee":8,"thpierce":6,"vastin":4,"ezhang6811":2,"lukeina2z":2,"srprash":1}},"maintainers":[],"active_maintainers":[]}},"events":{"total":{"ReleaseEvent":1,"DeleteEvent":7,"PullRequestEvent":23,"ForkEvent":4,"IssuesEvent":6,"WatchEvent":2,"IssueCommentEvent":14,"PushEvent":28,"PullRequestReviewCommentEvent":13,"PullRequestReviewEvent":23,"CreateEvent":14},"last_year":{"ReleaseEvent":1,"DeleteEvent":5,"PullRequestEvent":18,"ForkEvent":1,"IssuesEvent":2,"WatchEvent":1,"IssueCommentEvent":7,"PushEvent":23,"PullRequestReviewCommentEvent":13,"PullRequestReviewEvent":20,"CreateEvent":11}},"keywords":[],"dependencies":[{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-apache-http/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:22.269Z","updated_at":"2022-07-21T04:49:22.269Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-apache-http/build.gradle.kts","dependencies":[{"id":339188470,"package_name":"org.apache.httpcomponents:httpclient","ecosystem":"maven","requirements":"4.5.13","direct":true,"kind":"api","optional":false},{"id":339188475,"package_name":"com.github.tomakehurst:wiremock-jre8","ecosystem":"maven","requirements":"*","direct":true,"kind":"testImplementation","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-aws-sdk/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:22.592Z","updated_at":"2022-07-21T04:49:22.592Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-aws-sdk/build.gradle.kts","dependencies":[{"id":339193025,"package_name":"com.amazonaws:aws-java-sdk-core","ecosystem":"maven","requirements":"1.12.228","direct":true,"kind":"api","optional":false},{"id":339193028,"package_name":"com.amazonaws:aws-java-sdk-lambda","ecosystem":"maven","requirements":"1.12.228","direct":true,"kind":"testImplementation","optional":false},{"id":339193029,"package_name":"com.amazonaws:aws-java-sdk-s3","ecosystem":"maven","requirements":"1.12.228","direct":true,"kind":"testImplementation","optional":false},{"id":339193031,"package_name":"com.amazonaws:aws-java-sdk-sns","ecosystem":"maven","requirements":"1.12.228","direct":true,"kind":"testImplementation","optional":false},{"id":339193033,"package_name":"org.powermock:powermock-reflect","ecosystem":"maven","requirements":"2.0.2","direct":true,"kind":"testImplementation","optional":false},{"id":339193035,"package_name":"org.skyscreamer:jsonassert","ecosystem":"maven","requirements":"1.3.0","direct":true,"kind":"testImplementation","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-aws-sdk-core/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:22.826Z","updated_at":"2022-07-21T04:49:22.826Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-aws-sdk-core/build.gradle.kts","dependencies":[{"id":339193532,"package_name":"com.fasterxml.jackson.core:jackson-annotations","ecosystem":"maven","requirements":"*","direct":true,"kind":"compileOnly","optional":false},{"id":339193533,"package_name":"com.fasterxml.jackson.core:jackson-databind","ecosystem":"maven","requirements":"*","direct":true,"kind":"testImplementation","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-aws-sdk-v2/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:22.931Z","updated_at":"2022-07-21T04:49:22.931Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-aws-sdk-v2/build.gradle.kts","dependencies":[{"id":339193778,"package_name":"software.amazon.awssdk:aws-core","ecosystem":"maven","requirements":"2.15.20","direct":true,"kind":"api","optional":false},{"id":339193779,"package_name":"org.skyscreamer:jsonassert","ecosystem":"maven","requirements":"1.3.0","direct":true,"kind":"testImplementation","optional":false},{"id":339193780,"package_name":"software.amazon.awssdk:dynamodb","ecosystem":"maven","requirements":"2.15.20","direct":true,"kind":"testImplementation","optional":false},{"id":339193781,"package_name":"software.amazon.awssdk:lambda","ecosystem":"maven","requirements":"2.15.20","direct":true,"kind":"testImplementation","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-core/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:23.032Z","updated_at":"2022-07-21T04:49:23.032Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-core/build.gradle.kts","dependencies":[{"id":339194099,"package_name":"com.amazonaws:aws-java-sdk-xray","ecosystem":"maven","requirements":"1.12.228","direct":true,"kind":"api","optional":false},{"id":339194100,"package_name":"com.google.code.findbugs:jsr305","ecosystem":"maven","requirements":"3.0.2","direct":true,"kind":"compileOnly","optional":false},{"id":339194101,"package_name":"javax.servlet:javax.servlet-api","ecosystem":"maven","requirements":"3.1.0","direct":true,"kind":"compileOnly","optional":false},{"id":339194102,"package_name":"com.fasterxml.jackson.datatype:jackson-datatype-jsr310","ecosystem":"maven","requirements":"*","direct":true,"kind":"testImplementation","optional":false},{"id":339194103,"package_name":"com.github.stefanbirkner:system-rules","ecosystem":"maven","requirements":"1.16.0","direct":true,"kind":"testImplementation","optional":false},{"id":339194104,"package_name":"com.github.tomakehurst:wiremock-jre8","ecosystem":"maven","requirements":"*","direct":true,"kind":"testImplementation","optional":false},{"id":339194105,"package_name":"org.openjdk.jmh:jmh-core","ecosystem":"maven","requirements":"1.19","direct":true,"kind":"testImplementation","optional":false},{"id":339194106,"package_name":"org.powermock:powermock-module-junit4","ecosystem":"maven","requirements":"2.0.7","direct":true,"kind":"testImplementation","optional":false},{"id":339194107,"package_name":"org.powermock:powermock-api-mockito2","ecosystem":"maven","requirements":"2.0.7","direct":true,"kind":"testImplementation","optional":false},{"id":339194108,"package_name":"org.skyscreamer:jsonassert","ecosystem":"maven","requirements":"1.3.0","direct":true,"kind":"testImplementation","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-log4j/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:23.134Z","updated_at":"2022-07-21T04:49:23.134Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-log4j/build.gradle.kts","dependencies":[{"id":339194150,"package_name":"org.apache.logging.log4j:log4j-api","ecosystem":"maven","requirements":"2.17.0","direct":true,"kind":"compileOnly","optional":false},{"id":339194151,"package_name":"org.apache.logging.log4j:log4j-api","ecosystem":"maven","requirements":"2.17.0","direct":true,"kind":"testImplementation","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-metrics/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:23.214Z","updated_at":"2022-07-21T04:49:23.214Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-metrics/build.gradle.kts","dependencies":[{"id":339195341,"package_name":"com.github.stefanbirkner:system-rules","ecosystem":"maven","requirements":"1.16.0","direct":true,"kind":"testImplementation","optional":false},{"id":339195342,"package_name":"org.powermock:powermock-module-junit4","ecosystem":"maven","requirements":"2.0.2","direct":true,"kind":"testImplementation","optional":false},{"id":339195343,"package_name":"org.powermock:powermock-api-mockito2","ecosystem":"maven","requirements":"2.0.2","direct":true,"kind":"testImplementation","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-slf4j/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:23.362Z","updated_at":"2022-07-21T04:49:23.362Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-slf4j/build.gradle.kts","dependencies":[{"id":339196669,"package_name":"org.slf4j:slf4j-api","ecosystem":"maven","requirements":"1.7.30","direct":true,"kind":"compileOnly","optional":false},{"id":339196672,"package_name":"ch.qos.logback:logback-classic","ecosystem":"maven","requirements":"1.3.0-alpha5","direct":true,"kind":"testImplementation","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-spring/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:23.774Z","updated_at":"2022-07-21T04:49:23.774Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-spring/build.gradle.kts","dependencies":[{"id":339199630,"package_name":"org.aspectj:aspectjrt","ecosystem":"maven","requirements":"1.8.11","direct":true,"kind":"api","optional":false},{"id":339199631,"package_name":"org.springframework:spring-context-support","ecosystem":"maven","requirements":"5.3.18","direct":true,"kind":"implementation","optional":false},{"id":339199632,"package_name":"org.springframework:spring-context","ecosystem":"maven","requirements":"5.3.18","direct":true,"kind":"implementation","optional":false},{"id":339199633,"package_name":"org.springframework:spring-aspects","ecosystem":"maven","requirements":"5.3.18","direct":true,"kind":"implementation","optional":false},{"id":339199634,"package_name":"org.springframework.data:spring-data-commons","ecosystem":"maven","requirements":"2.6.3","direct":true,"kind":"compileOnly","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-sql/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:24.165Z","updated_at":"2022-07-21T04:49:24.165Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-sql/build.gradle.kts","dependencies":[{"id":339203800,"package_name":"com.blogspot.mydailyjava:weak-lock-free","ecosystem":"maven","requirements":"0.18","direct":true,"kind":"implementation","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-sql-mysql/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:24.426Z","updated_at":"2022-07-21T04:49:24.426Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-sql-mysql/build.gradle.kts","dependencies":[{"id":339210354,"package_name":"org.apache.tomcat:tomcat-jdbc","ecosystem":"maven","requirements":"8.0.36","direct":true,"kind":"compileOnly","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-sql-postgres/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:24.791Z","updated_at":"2022-07-21T04:49:24.791Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-sql-postgres/build.gradle.kts","dependencies":[{"id":339211918,"package_name":"org.apache.tomcat:tomcat-jdbc","ecosystem":"maven","requirements":"8.0.36","direct":true,"kind":"compileOnly","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/continuous-monitoring.yml","sha":null,"kind":"manifest","created_at":"2023-01-14T05:50:16.768Z","updated_at":"2023-01-14T05:50:16.768Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/.github/workflows/continuous-monitoring.yml","dependencies":[{"id":6892647870,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6892647871,"package_name":"aws-actions/configure-aws-credentials","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6892647872,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6892647873,"package_name":"actions/cache","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/master-build.yml","sha":null,"kind":"manifest","created_at":"2023-01-14T05:50:16.793Z","updated_at":"2023-01-14T05:50:16.793Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/.github/workflows/master-build.yml","dependencies":[{"id":6892647874,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6892647875,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6892647876,"package_name":"actions/cache","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6892647877,"package_name":"codecov/codecov-action","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6892647878,"package_name":"actions/upload-artifact","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/pr-build.yml","sha":null,"kind":"manifest","created_at":"2023-01-14T05:50:16.839Z","updated_at":"2023-01-14T05:50:16.839Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/.github/workflows/pr-build.yml","dependencies":[{"id":6892647879,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6892647880,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6892647881,"package_name":"actions/cache","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6892647882,"package_name":"codecov/codecov-action","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6892647883,"package_name":"actions/upload-artifact","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/release-build.yml","sha":null,"kind":"manifest","created_at":"2023-01-14T05:50:16.863Z","updated_at":"2023-01-14T05:50:16.863Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/.github/workflows/release-build.yml","dependencies":[{"id":6892647884,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6892647885,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6892647886,"package_name":"actions/cache","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6892647887,"package_name":"actions/create-release","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-lambda/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2023-01-14T05:50:16.920Z","updated_at":"2023-01-14T05:50:16.920Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-lambda/build.gradle.kts","dependencies":[{"id":6892647888,"package_name":"com.amazonaws:aws-lambda-java-events","ecosystem":"maven","requirements":"3.11.0","direct":true,"kind":"compileOnly","optional":false},{"id":6892647889,"package_name":"com.amazonaws:aws-lambda-java-events","ecosystem":"maven","requirements":"3.11.0","direct":true,"kind":"testImplementation","optional":false},{"id":6892647890,"package_name":"org.powermock:powermock-module-junit4","ecosystem":"maven","requirements":"2.0.7","direct":true,"kind":"testImplementation","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-aws-sdk-instrumentor/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2023-12-01T18:46:27.549Z","updated_at":"2023-12-01T18:46:27.549Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-aws-sdk-instrumentor/build.gradle.kts","dependencies":[]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2023-12-01T18:46:27.858Z","updated_at":"2023-12-01T18:46:27.858Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/build.gradle.kts","dependencies":[]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-benchmark/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2023-12-01T18:46:27.959Z","updated_at":"2023-12-01T18:46:27.959Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-benchmark/build.gradle.kts","dependencies":[]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-bom/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2023-12-01T18:46:27.979Z","updated_at":"2023-12-01T18:46:27.979Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-bom/build.gradle.kts","dependencies":[]},{"ecosystem":"maven","filepath":"build.gradle.kts","sha":null,"kind":"manifest","created_at":"2023-12-01T18:46:28.036Z","updated_at":"2023-12-01T18:46:28.036Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/build.gradle.kts","dependencies":[]},{"ecosystem":"maven","filepath":"dependencyManagement/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2023-12-01T18:46:28.046Z","updated_at":"2023-12-01T18:46:28.046Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/dependencyManagement/build.gradle.kts","dependencies":[]},{"ecosystem":"maven","filepath":"jacoco/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2023-12-01T18:46:28.058Z","updated_at":"2023-12-01T18:46:28.058Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/jacoco/build.gradle.kts","dependencies":[]},{"ecosystem":"maven","filepath":"smoke-tests/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2023-12-01T18:46:28.068Z","updated_at":"2023-12-01T18:46:28.068Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/smoke-tests/build.gradle.kts","dependencies":[]}],"score":24.44007520262221,"created_at":"2025-05-07T22:14:03.219Z","updated_at":"2026-06-21T13:30:32.695Z","avatar_url":"https://github.com/aws.png","language":"Java","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/360599","html_url":"https://summary.ecosyste.ms/projects/360599"}