{"id":360599,"url":"https://github.com/aws/aws-xray-sdk-java","last_synced_at":"2026-08-22T20:02:14.655Z","repository":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":553,"last_synced_at":"2026-08-21T23:27:01.076Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255755,"followers":16480,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-21T23:27:01.090Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"packages":[{"id":5029397,"name":"com.amazonaws:aws-xray-recorder-sdk-aws-sdk-core","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":33,"first_release_published_at":"2019-02-07T22:45:12.000Z","latest_release_published_at":"2026-07-16T18:59:15.000Z","latest_release_number":"2.21.1","last_synced_at":"2026-08-21T19:54:29.449Z","created_at":"2022-07-27T15:12:10.198Z","updated_at":"2026-08-21T19:54:29.450Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-aws-sdk-core/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-aws-sdk-core/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.616Z","dependent_packages_count":7,"downloads":null,"downloads_period":null,"dependent_repos_count":147,"rankings":{"downloads":null,"dependent_repos_count":1.463827776487454,"dependent_packages_count":8.396977136289182,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":6.537122993067598,"average":12.734204579394696},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-aws-sdk-core","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-core","docker_dependents_count":1,"docker_downloads_count":12,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-core","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-core/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-core/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-core/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-core/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-core/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-core/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-core/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":14827940,"name":"github.com/aws/aws-xray-sdk-java","ecosystem":"go","description":null,"homepage":null,"licenses":"apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":null,"versions_count":36,"first_release_published_at":"2026-07-27T09:31:46.482Z","latest_release_published_at":"2026-07-16T18:58:03.000Z","latest_release_number":"v2.21.1+incompatible","last_synced_at":"2026-08-21T19:32:16.603Z","created_at":"2026-07-27T09:31:43.813Z","updated_at":"2026-08-21T19:32:16.603Z","registry_url":"https://pkg.go.dev/github.com/aws/aws-xray-sdk-java","install_command":"go get github.com/aws/aws-xray-sdk-java","documentation_url":"https://pkg.go.dev/github.com/aws/aws-xray-sdk-java#section-documentation","metadata":{},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-16T22:15:36.366Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":4.853083542488347,"dependent_packages_count":4.547369534448248,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.700226538468298},"purl":"pkg:golang/github.com/aws/aws-xray-sdk-java","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/aws/aws-xray-sdk-java","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/aws/aws-xray-sdk-java","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/aws/aws-xray-sdk-java/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Faws%2Faws-xray-sdk-java/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Faws%2Faws-xray-sdk-java/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Faws%2Faws-xray-sdk-java/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Faws%2Faws-xray-sdk-java/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Faws%2Faws-xray-sdk-java/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Faws%2Faws-xray-sdk-java/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2281858,"maintainers_count":0,"namespaces_count":839461,"keywords_count":124729,"github":"golang","metadata":{"funded_packages_count":67494,"sync_missing_packages_cursor":{"timestamp":"2026-08-17T00:00:58.969562Z","path":"github.com/Tektoncd/operator","version":"v0.78.0"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-08-22T05:01:09.392Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":11855943,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-apache-http","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-08-21T19:35:37.566Z","created_at":"2025-06-30T17:46:12.593Z","updated_at":"2026-08-21T19:35:37.566Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-apache-http/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-apache-http/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.487Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-apache-http","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-apache-http","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-apache-http","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-apache-http/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-apache-http/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-apache-http/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-apache-http/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-apache-http/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-apache-http/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-apache-http/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855944,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-08-21T19:32:07.553Z","created_at":"2025-06-30T17:46:12.642Z","updated_at":"2026-08-21T19:32:07.553Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.409Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5080065,"name":"com.amazonaws:aws-xray-recorder-sdk-core","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":51,"first_release_published_at":"2016-12-01T11:55:08.000Z","latest_release_published_at":"2026-07-16T18:59:15.000Z","latest_release_number":"2.21.1","last_synced_at":"2026-08-21T19:42:14.017Z","created_at":"2022-07-28T18:40:41.121Z","updated_at":"2026-08-21T19:42:14.017Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-core/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-core/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.587Z","dependent_packages_count":52,"downloads":null,"downloads_period":null,"dependent_repos_count":271,"rankings":{"downloads":null,"dependent_repos_count":0.9391382355414762,"dependent_packages_count":1.3310131879838365,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":1.4410023946628652,"average":10.196849761863486},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-core","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-core","docker_dependents_count":19,"docker_downloads_count":3745621,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-core","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-core/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-core/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-core/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-core/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-core/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-core/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-core/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855942,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-log4j","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-08-21T19:43:50.062Z","created_at":"2025-06-30T17:46:12.588Z","updated_at":"2026-08-21T19:43:50.062Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-log4j/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-log4j/","metadata":{},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.656Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-log4j","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-log4j","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-log4j","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-log4j/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-log4j/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-log4j/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-log4j/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-log4j/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-log4j/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-log4j/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4652973,"name":"com.amazonaws:aws-xray-auto-instrumentation-agent-installer","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":2,"first_release_published_at":"2019-12-02T17:00:32.000Z","latest_release_published_at":"2019-12-02T22:53:12.000Z","latest_release_number":"2.4.0-beta.1","last_synced_at":"2026-08-21T19:32:01.038Z","created_at":"2022-07-25T16:39:28.680Z","updated_at":"2026-08-21T19:32:01.039Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-auto-instrumentation-agent-installer/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-auto-instrumentation-agent-installer/","metadata":{"distribution_repositories":["https://aws.oss.sonatype.org/service/local/staging/deploy/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.535Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":48.85985838769028,"stargazers_count":19.895747015969004,"forks_count":13.395184218393549,"average":28.532683390750055},"purl":"pkg:maven/com.amazonaws/aws-xray-auto-instrumentation-agent-installer","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-auto-instrumentation-agent-installer","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-auto-instrumentation-agent-installer","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-auto-instrumentation-agent-installer/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-installer/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-installer/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-installer/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-installer/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-installer/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-installer/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855937,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-core","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-08-21T19:32:27.884Z","created_at":"2025-06-30T17:46:12.509Z","updated_at":"2026-08-21T19:32:27.884Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-core/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-core/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.615Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-core","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-core","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-core","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-core/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-core/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-core/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-core/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-core/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-core/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-core/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4760609,"name":"com.amazonaws:aws-xray-recorder-sdk-slf4j","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":30,"first_release_published_at":"2019-11-21T20:33:09.000Z","latest_release_published_at":"2026-07-16T18:59:15.000Z","latest_release_number":"2.21.1","last_synced_at":"2026-08-21T19:33:15.617Z","created_at":"2022-07-26T03:29:44.846Z","updated_at":"2026-08-21T19:33:15.617Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-slf4j/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-slf4j/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.486Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":6,"rankings":{"downloads":null,"dependent_repos_count":10.025951453161232,"dependent_packages_count":32.9817739099789,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":null,"average":22.570205088567345},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-slf4j","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-slf4j","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-slf4j","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-slf4j/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-slf4j/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-slf4j/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-slf4j/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-slf4j/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-slf4j/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-slf4j/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855941,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-core","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-08-21T19:33:17.289Z","created_at":"2025-06-30T17:46:12.586Z","updated_at":"2026-08-21T19:33:17.290Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk-core/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk-core/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.417Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk-core","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-core","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-core","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-core/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-core/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-core/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-core/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-core/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-core/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-core/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4652991,"name":"com.amazonaws:aws-xray-recorder-sdk-aws-sdk","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":51,"first_release_published_at":"2016-12-01T11:55:24.000Z","latest_release_published_at":"2026-07-16T18:59:15.000Z","latest_release_number":"2.21.1","last_synced_at":"2026-08-21T19:34:02.654Z","created_at":"2022-07-25T16:39:37.463Z","updated_at":"2026-08-21T19:34:02.654Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-aws-sdk/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-aws-sdk/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.664Z","dependent_packages_count":26,"downloads":null,"downloads_period":null,"dependent_repos_count":113,"rankings":{"downloads":null,"dependent_repos_count":1.787766773329275,"dependent_packages_count":2.506638045310917,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":6.537122993067598,"average":11.620924560567408},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-aws-sdk","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk","docker_dependents_count":1,"docker_downloads_count":12,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855936,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-instrumentor","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-08-21T19:34:16.499Z","created_at":"2025-06-30T17:46:12.498Z","updated_at":"2026-08-21T19:34:16.500Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk-instrumentor/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk-instrumentor/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.643Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk-instrumentor","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-instrumentor","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-instrumentor","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-instrumentor/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-instrumentor/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-instrumentor/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-instrumentor/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-instrumentor/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-instrumentor/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-instrumentor/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855940,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-08-21T19:34:53.461Z","created_at":"2025-06-30T17:46:12.573Z","updated_at":"2026-08-21T19:34:53.461Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.601Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk-v2-instrumentor","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855945,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-postgres","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-08-21T19:35:00.490Z","created_at":"2025-06-30T17:46:12.708Z","updated_at":"2026-08-21T19:35:00.490Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-sql-postgres/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-sql-postgres/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.399Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-sql-postgres","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-postgres","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-postgres","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-postgres/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-postgres/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-postgres/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-postgres/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-postgres/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-postgres/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-postgres/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4652987,"name":"com.amazonaws:aws-xray-recorder-sdk-sql","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":30,"first_release_published_at":"2019-11-21T20:32:28.000Z","latest_release_published_at":"2026-07-16T18:59:15.000Z","latest_release_number":"2.21.1","last_synced_at":"2026-08-21T19:36:09.341Z","created_at":"2022-07-25T16:39:35.840Z","updated_at":"2026-08-21T19:36:09.341Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-sql/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-sql/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.640Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":7,"rankings":{"downloads":null,"dependent_repos_count":9.291861736424547,"dependent_packages_count":32.9817739099789,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":null,"average":22.386682659383176},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-sql","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-sql","docker_dependents_count":1,"docker_downloads_count":210,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-sql","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-sql/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4760606,"name":"com.amazonaws:aws-xray-auto-instrumentation-agent-pom","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":2,"first_release_published_at":"2019-12-02T16:59:04.000Z","latest_release_published_at":"2019-12-02T22:51:23.000Z","latest_release_number":"2.4.0-beta.1","last_synced_at":"2026-08-21T19:36:57.821Z","created_at":"2022-07-26T03:29:40.868Z","updated_at":"2026-08-21T19:36:57.821Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-auto-instrumentation-agent-pom/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-auto-instrumentation-agent-pom/","metadata":{"distribution_repositories":["https://aws.oss.sonatype.org/service/local/staging/deploy/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.642Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":48.85985838769028,"stargazers_count":19.895747015969004,"forks_count":13.395184218393549,"average":28.532683390750055},"purl":"pkg:maven/com.amazonaws/aws-xray-auto-instrumentation-agent-pom","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-auto-instrumentation-agent-pom","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-auto-instrumentation-agent-pom","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-auto-instrumentation-agent-pom/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-pom/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-pom/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-pom/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-pom/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-pom/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-pom/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4653002,"name":"com.amazonaws:aws-xray-recorder-sdk-metrics","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":30,"first_release_published_at":"2019-11-21T20:33:20.000Z","latest_release_published_at":"2026-07-16T18:59:15.000Z","latest_release_number":"2.21.1","last_synced_at":"2026-08-21T19:37:13.260Z","created_at":"2022-07-25T16:39:42.383Z","updated_at":"2026-08-21T19:37:13.260Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-metrics/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-metrics/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.442Z","dependent_packages_count":3,"downloads":null,"downloads_period":null,"dependent_repos_count":2,"rankings":{"downloads":null,"dependent_repos_count":16.11232814170775,"dependent_packages_count":17.562685975402186,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":null,"average":20.237027277059795},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-metrics","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-metrics","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-metrics","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-metrics/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-metrics/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-metrics/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-metrics/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-metrics/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-metrics/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-metrics/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855935,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-08-21T19:37:13.365Z","created_at":"2025-06-30T17:46:12.474Z","updated_at":"2026-08-21T19:37:13.365Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk-v2/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk-v2/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.306Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-aws-sdk-v2","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-aws-sdk-v2/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855939,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-mysql","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-08-21T19:38:22.815Z","created_at":"2025-06-30T17:46:12.533Z","updated_at":"2026-08-21T19:38:22.816Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-sql-mysql/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-sql-mysql/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.291Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-sql-mysql","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-mysql","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-mysql","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-mysql/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-mysql/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-mysql/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-mysql/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-mysql/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-mysql/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql-mysql/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4652979,"name":"com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":33,"first_release_published_at":"2019-02-07T22:50:05.000Z","latest_release_published_at":"2026-07-16T18:59:15.000Z","latest_release_number":"2.21.1","last_synced_at":"2026-08-21T19:42:05.199Z","created_at":"2022-07-25T16:39:32.212Z","updated_at":"2026-08-21T19:42:05.200Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-aws-sdk-v2/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-aws-sdk-v2/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.489Z","dependent_packages_count":14,"downloads":null,"downloads_period":null,"dependent_repos_count":258,"rankings":{"downloads":null,"dependent_repos_count":0.9809889586178449,"dependent_packages_count":4.473221544511948,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":null,"average":13.18182637356476},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-aws-sdk-v2","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4653006,"name":"com.amazonaws:aws-xray-recorder-sdk-sql-postgres","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":51,"first_release_published_at":"2016-12-01T11:55:45.000Z","latest_release_published_at":"2026-07-16T18:59:15.000Z","latest_release_number":"2.21.1","last_synced_at":"2026-08-21T19:40:37.724Z","created_at":"2022-07-25T16:39:43.455Z","updated_at":"2026-08-21T19:40:37.725Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-sql-postgres/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-sql-postgres/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.664Z","dependent_packages_count":2,"downloads":null,"downloads_period":null,"dependent_repos_count":9,"rankings":{"downloads":null,"dependent_repos_count":8.211352158816485,"dependent_packages_count":23.155264180186386,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":6.537122993067598,"average":17.035366864639947},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-sql-postgres","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-sql-postgres","docker_dependents_count":1,"docker_downloads_count":12,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-sql-postgres","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-sql-postgres/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql-postgres/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql-postgres/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql-postgres/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql-postgres/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql-postgres/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql-postgres/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855932,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-bom","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-08-21T19:42:09.951Z","created_at":"2025-06-30T17:46:12.459Z","updated_at":"2026-08-21T19:42:09.951Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-bom/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-bom/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.497Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-bom","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-bom","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-bom","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-bom/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-bom/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-bom/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-bom/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-bom/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-bom/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-bom/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855933,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-metrics","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-08-21T19:41:12.899Z","created_at":"2025-06-30T17:46:12.461Z","updated_at":"2026-08-21T19:41:12.899Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-metrics/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-metrics/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.682Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-metrics","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-metrics","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-metrics","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-metrics/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-metrics/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-metrics/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-metrics/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-metrics/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-metrics/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-metrics/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4652976,"name":"com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":33,"first_release_published_at":"2019-02-07T22:50:17.000Z","latest_release_published_at":"2026-07-16T18:59:15.000Z","latest_release_number":"2.21.1","last_synced_at":"2026-08-21T19:41:13.084Z","created_at":"2022-07-25T16:39:30.105Z","updated_at":"2026-08-21T19:41:13.085Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.510Z","dependent_packages_count":30,"downloads":null,"downloads_period":null,"dependent_repos_count":141,"rankings":{"downloads":null,"dependent_repos_count":1.513834767738499,"dependent_packages_count":2.1806248548385807,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":null,"average":12.741888653426583},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-aws-sdk-v2-instrumentor","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855930,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-08-21T19:41:19.982Z","created_at":"2025-06-30T17:46:12.400Z","updated_at":"2026-08-21T19:41:19.983Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-sql/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-sql/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.581Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-sql","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-sql/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4653012,"name":"com.amazonaws:aws-xray-recorder-sdk-bom","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":51,"first_release_published_at":"2016-12-01T11:55:32.000Z","latest_release_published_at":"2026-07-16T18:59:15.000Z","latest_release_number":"2.21.1","last_synced_at":"2026-08-21T19:41:55.465Z","created_at":"2022-07-25T16:39:45.489Z","updated_at":"2026-08-21T19:41:55.465Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-bom/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-bom/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.635Z","dependent_packages_count":8,"downloads":null,"downloads_period":null,"dependent_repos_count":67,"rankings":{"downloads":null,"dependent_repos_count":2.5346720224912596,"dependent_packages_count":7.463445696183775,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":null,"average":14.317803177451072},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-bom","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-bom","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-bom","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-bom/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-bom/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-bom/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-bom/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-bom/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-bom/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-bom/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855931,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-lambda","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-08-21T19:49:09.941Z","created_at":"2025-06-30T17:46:12.451Z","updated_at":"2026-08-21T19:49:09.942Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-lambda/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-lambda/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.650Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-lambda","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-lambda","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-lambda","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-lambda/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-lambda/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-lambda/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-lambda/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-lambda/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-lambda/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-lambda/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5080082,"name":"com.amazonaws:aws-xray-recorder-sdk-aws-sdk-instrumentor","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":51,"first_release_published_at":"2016-12-01T11:55:29.000Z","latest_release_published_at":"2026-07-16T18:59:15.000Z","latest_release_number":"2.21.1","last_synced_at":"2026-08-21T19:50:10.920Z","created_at":"2022-07-28T18:42:55.963Z","updated_at":"2026-08-21T19:50:10.921Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-aws-sdk-instrumentor/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-aws-sdk-instrumentor/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.577Z","dependent_packages_count":24,"downloads":null,"downloads_period":null,"dependent_repos_count":74,"rankings":{"downloads":null,"dependent_repos_count":2.377881992975486,"dependent_packages_count":2.704407300918622,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":6.537122993067598,"average":11.778501455618192},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-aws-sdk-instrumentor","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-instrumentor","docker_dependents_count":1,"docker_downloads_count":12,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-instrumentor","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-instrumentor/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-instrumentor/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-instrumentor/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-instrumentor/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-instrumentor/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-instrumentor/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-aws-sdk-instrumentor/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4653014,"name":"com.amazonaws:aws-xray-recorder-sdk-spring","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":38,"first_release_published_at":"2018-01-04T00:34:31.000Z","latest_release_published_at":"2026-07-16T18:59:15.000Z","latest_release_number":"2.21.1","last_synced_at":"2026-08-21T19:44:15.306Z","created_at":"2022-07-25T16:39:46.174Z","updated_at":"2026-08-21T19:44:15.306Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-spring/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-spring/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.528Z","dependent_packages_count":28,"downloads":null,"downloads_period":null,"dependent_repos_count":187,"rankings":{"downloads":null,"dependent_repos_count":1.2250848027809706,"dependent_packages_count":2.335597184068684,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":4.91466510759965,"average":11.149688417115712},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-spring","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-spring","docker_dependents_count":15,"docker_downloads_count":342,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-spring","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-spring/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-spring/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-spring/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-spring/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-spring/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-spring/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-spring/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4760610,"name":"com.amazonaws:aws-xray-recorder-sdk-sql-mysql","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":51,"first_release_published_at":"2016-12-01T11:55:37.000Z","latest_release_published_at":"2026-07-16T18:59:15.000Z","latest_release_number":"2.21.1","last_synced_at":"2026-08-21T19:41:57.390Z","created_at":"2022-07-26T03:29:48.557Z","updated_at":"2026-08-21T19:41:57.391Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-sql-mysql/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-sql-mysql/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.530Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":15,"rankings":{"downloads":null,"dependent_repos_count":6.293027148904471,"dependent_packages_count":32.9817739099789,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":6.537122993067598,"average":18.617003808616044},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-sql-mysql","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-sql-mysql","docker_dependents_count":1,"docker_downloads_count":12,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-sql-mysql","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-sql-mysql/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql-mysql/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql-mysql/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql-mysql/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql-mysql/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql-mysql/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-sql-mysql/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855938,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-spring","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-08-21T19:51:32.213Z","created_at":"2025-06-30T17:46:12.516Z","updated_at":"2026-08-21T19:51:32.213Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-spring/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-spring/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.555Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-spring","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-spring","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-spring","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-spring/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-spring/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-spring/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-spring/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-spring/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-spring/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-spring/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4773826,"name":"com.amazonaws:aws-xray-auto-instrumentation-agent-bootstrap","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":2,"first_release_published_at":"2019-12-02T16:59:20.000Z","latest_release_published_at":"2019-12-02T22:51:41.000Z","latest_release_number":"2.4.0-beta.1","last_synced_at":"2026-08-21T19:39:47.079Z","created_at":"2022-07-26T07:57:44.771Z","updated_at":"2026-08-21T19:39:47.080Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-auto-instrumentation-agent-bootstrap/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-auto-instrumentation-agent-bootstrap/","metadata":{"distribution_repositories":["https://aws.oss.sonatype.org/service/local/staging/deploy/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.626Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":31.998402898858956,"stargazers_count":19.895747015969004,"forks_count":13.395184218393549,"average":24.317319518542224},"purl":"pkg:maven/com.amazonaws/aws-xray-auto-instrumentation-agent-bootstrap","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-auto-instrumentation-agent-bootstrap","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-auto-instrumentation-agent-bootstrap","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-auto-instrumentation-agent-bootstrap/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-bootstrap/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-bootstrap/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-bootstrap/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-bootstrap/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-bootstrap/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-bootstrap/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4652972,"name":"com.amazonaws:aws-xray-auto-instrumentation-agent-runtime","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":2,"first_release_published_at":"2019-12-02T17:00:26.000Z","latest_release_published_at":"2019-12-02T22:53:05.000Z","latest_release_number":"2.4.0-beta.1","last_synced_at":"2026-08-21T19:51:48.702Z","created_at":"2022-07-25T16:39:28.567Z","updated_at":"2026-08-21T19:51:48.702Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-auto-instrumentation-agent-runtime/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-auto-instrumentation-agent-runtime/","metadata":{"distribution_repositories":["https://aws.oss.sonatype.org/service/local/staging/deploy/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.586Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":48.85985838769028,"stargazers_count":19.895747015969004,"forks_count":13.395184218393549,"average":28.532683390750055},"purl":"pkg:maven/com.amazonaws/aws-xray-auto-instrumentation-agent-runtime","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-auto-instrumentation-agent-runtime","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-auto-instrumentation-agent-runtime","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-auto-instrumentation-agent-runtime/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-runtime/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-runtime/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-runtime/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-runtime/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-runtime/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-auto-instrumentation-agent-runtime/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4652996,"name":"com.amazonaws:aws-xray-recorder-sdk-log4j","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":30,"first_release_published_at":"2019-11-21T20:33:14.000Z","latest_release_published_at":"2026-07-16T18:59:15.000Z","latest_release_number":"2.21.1","last_synced_at":"2026-08-21T19:32:56.448Z","created_at":"2022-07-25T16:39:40.355Z","updated_at":"2026-08-21T19:32:56.448Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-log4j/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-log4j/","metadata":{},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.495Z","dependent_packages_count":3,"downloads":null,"downloads_period":null,"dependent_repos_count":5,"rankings":{"downloads":null,"dependent_repos_count":10.913226830919074,"dependent_packages_count":17.562685975402186,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":null,"average":18.93725194936263},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-log4j","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-log4j","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-log4j","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-log4j/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-log4j/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-log4j/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-log4j/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-log4j/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-log4j/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-log4j/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11855934,"name":"com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-slf4j","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.sonatype.central.testing.amazon","versions_count":1,"first_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_published_at":"2025-06-30T17:36:03.000Z","latest_release_number":"0.0.1-sonatype-test","last_synced_at":"2026-08-21T19:47:55.528Z","created_at":"2025-06-30T17:46:12.469Z","updated_at":"2026-08-21T19:47:55.529Z","registry_url":"https://central.sonatype.com/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-slf4j/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-slf4j/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.658Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":33.47697198098052,"dependent_packages_count":47.85973989519184,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":40.66835593808618},"purl":"pkg:maven/com.sonatype.central.testing.amazon/aws-xray-recorder-sdk-slf4j","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-slf4j","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-slf4j","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-slf4j/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-slf4j/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-slf4j/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-slf4j/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-slf4j/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-slf4j/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.sonatype.central.testing.amazon:aws-xray-recorder-sdk-slf4j/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5425211,"name":"com.amazonaws:aws-xray-recorder-sdk-lambda","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":17,"first_release_published_at":"2022-10-10T20:09:47.000Z","latest_release_published_at":"2026-07-16T18:59:15.000Z","latest_release_number":"2.21.1","last_synced_at":"2026-08-21T19:37:34.301Z","created_at":"2022-11-15T18:46:09.682Z","updated_at":"2026-08-21T19:37:34.302Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-lambda/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-lambda/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.630Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":31.998402898858956,"stargazers_count":20.10080196146492,"forks_count":13.828167165927974,"average":24.47682899179981},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-lambda","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-lambda","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-lambda","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-lambda/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-lambda/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-lambda/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-lambda/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-lambda/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-lambda/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-lambda/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4653004,"name":"com.amazonaws:aws-xray-recorder-sdk-apache-http","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":51,"first_release_published_at":"2016-12-01T11:55:15.000Z","latest_release_published_at":"2026-07-16T18:59:15.000Z","latest_release_number":"2.21.1","last_synced_at":"2026-08-21T19:37:52.816Z","created_at":"2022-07-25T16:39:42.734Z","updated_at":"2026-08-21T19:37:52.816Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-apache-http/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-apache-http/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.487Z","dependent_packages_count":6,"downloads":null,"downloads_period":null,"dependent_repos_count":308,"rankings":{"downloads":null,"dependent_repos_count":0.8554367893887391,"dependent_packages_count":9.706364113305325,"stargazers_count":27.846750261316718,"forks_count":19.426344729812534,"docker_downloads_count":5.483245693780862,"average":12.663628317520836},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-apache-http","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-apache-http","docker_dependents_count":8,"docker_downloads_count":119,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-apache-http","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-apache-http/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-apache-http/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-apache-http/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-apache-http/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-apache-http/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-apache-http/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-apache-http/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4653005,"name":"com.amazonaws:aws-xray-recorder-sdk-pom","ecosystem":"maven","description":"The Amazon Web Services X-Ray Recorder SDK for Java provides Java APIs for emitting tracing data to AWS X-Ray. AWS X-Ray helps developers analyze and debug distributed applications. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.","homepage":"https://aws.amazon.com/documentation/xray/","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-xray-sdk-java","keywords_array":[],"namespace":"com.amazonaws","versions_count":25,"first_release_published_at":"2016-12-01T11:54:52.000Z","latest_release_published_at":"2020-06-21T05:17:10.000Z","latest_release_number":"2.6.1","last_synced_at":"2026-08-21T19:38:51.710Z","created_at":"2022-07-25T16:39:43.160Z","updated_at":"2026-08-21T19:38:51.711Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws/aws-xray-recorder-sdk-pom/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws/aws-xray-recorder-sdk-pom/","metadata":{"distribution_repositories":["https://aws.oss.sonatype.org/service/local/staging/deploy/maven2"]},"repo_metadata":{"id":27026880,"uuid":"84104620","full_name":"aws/aws-xray-sdk-java","owner":"aws","description":"The official AWS X-Ray Recorder SDK for Java.","archived":false,"fork":false,"pushed_at":"2026-08-13T00:37:01.000Z","size":1333,"stargazers_count":100,"open_issues_count":77,"forks_count":100,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-08-16T22:08:52.971Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-03-06T18:04:56.000Z","updated_at":"2026-08-12T23:38:16.000Z","dependencies_parsed_at":"2024-08-08T01:28:50.269Z","dependency_job_id":"41928411-0afe-4403-bea7-d89452cf8655","html_url":"https://github.com/aws/aws-xray-sdk-java","commit_stats":null,"previous_names":[],"tags_count":39,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-xray-sdk-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-xray-sdk-java/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/sbom","scorecard":{"id":80478,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-xray-sdk-java","commit":"d825872b61b7d0035b0eb90f5087fa400b7f875e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":5,"reason":"6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/continuous-monitoring.yml:9","Warn: no topLevel permission defined: .github/workflows/master-build.yml:1","Warn: no topLevel permission defined: .github/workflows/pr-build.yml:1","Warn: no topLevel permission defined: .github/workflows/release-build.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-monitoring.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/continuous-monitoring.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/master-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/pr-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-xray-sdk-java/release-build.yml/master?enable=pin","Info:   0 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T05:43:58.392Z","repository_id":27026880,"created_at":"2025-08-15T05:43:58.393Z","updated_at":"2025-08-15T05:43:58.393Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36725058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-16T02:00:06.462Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":554,"last_synced_at":"2026-08-14T04:50:34.380Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/aws","funding_links":[],"total_stars":255470,"followers":16392,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-08-14T04:50:34.396Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-16T22:15:51.633Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":48.85985838769028,"stargazers_count":19.895747015969004,"forks_count":13.395184218393549,"average":28.532683390750055},"purl":"pkg:maven/com.amazonaws/aws-xray-recorder-sdk-pom","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-pom","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws:aws-xray-recorder-sdk-pom","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws:aws-xray-recorder-sdk-pom/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-13T15:31:18.320Z","issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":431104.7727272727,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.125,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-pom/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-pom/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-pom/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-pom/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-pom/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws:aws-xray-recorder-sdk-pom/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}}],"commits":{"id":2209276,"full_name":"aws/aws-xray-sdk-java","default_branch":"master","total_commits":305,"total_committers":63,"total_bot_commits":0,"total_bot_committers":0,"mean_commits":4.841269841269841,"dds":0.8459016393442623,"past_year_total_commits":25,"past_year_total_committers":7,"past_year_total_bot_commits":0,"past_year_total_bot_committers":0,"past_year_mean_commits":3.5714285714285716,"past_year_dds":0.6799999999999999,"last_synced_at":"2026-08-19T18:31:32.799Z","last_synced_commit":"6fd1da4dbe0da9497613bd1bbfb14388e23e8c11","created_at":"2024-10-03T21:06:12.910Z","updated_at":"2026-08-19T18:31:30.692Z","committers":[{"name":"William Armiros","email":"54150514+willarmiros","login":"willarmiros","count":47},{"name":"Anuraag Agrawal","email":"aanuraag@amazon.co.jp","login":null,"count":40},{"name":"Prashant Srivastava","email":"50466688+srprash","login":"srprash","count":19},{"name":"atshaw43","email":"108552302+atshaw43","login":"atshaw43","count":15},{"name":"Jeffery Saeteurn","email":"cssaete@amazon.com","login":"chanchiem","count":15},{"name":"William Armiros","email":"armiros@amazon.com","login":null,"count":11},{"name":"Jonathan Lee","email":"107072447+jj22ee","login":"jj22ee","count":9},{"name":"Thomas Pierce","email":"thp@amazon.com","login":"thpierce","count":9},{"name":"Wu","email":"haotianw@amazon.com","login":"haotianw465","count":9},{"name":"Christopher Radek","email":"cjradek@gmail.com","login":"chrisradek","count":8},{"name":"Lei Wang","email":"66336933+wangzlei","login":"wangzlei","count":8},{"name":"Mahad Janjua","email":"134644284+majanjua-amzn","login":"majanjua-amzn","count":8},{"name":"Zhao","email":"luluzhao@amazon.com","login":"luluzhao","count":8},{"name":"Bhautik Pipaliya","email":"56270044+bhautikpip","login":"bhautikpip","count":7},{"name":"James Bowman","email":"jamebowm@amazon.com","login":"jamesdbowman","count":6},{"name":"Michael Lee","email":"michl@amazon.com","login":"c1tadel","count":6},{"name":"Eric Zhang","email":"eric.zhang6811@gmail.com","login":"ezhang6811","count":5},{"name":"Scott Chamberlain","email":"chamsco@amazon.com","login":"chamsco-aws","count":5},{"name":"Shengxin Li","email":"shengxil@amazon.com","login":"shengxil","count":5},{"name":"Steven Aerts","email":"steven.aerts@technicolor.com","login":"steven-aerts","count":5},{"name":"Kurru","email":"thekurru@gmail.com","login":"Kurru","count":4},{"name":"Andrew Powell","email":"andy.powell@mac.com","login":"andrewpowell","count":3},{"name":"Luke (GuangHui) Zhang","email":"lukezha@amazon.com","login":"lukeina2z","count":3},{"name":"Vastin","email":"3690049+vastin","login":"vastin","count":3},{"name":"richard hernandez","email":"47188332+rhernandez35","login":"rhernandez35","count":3},{"name":"Yogiraj Awati","email":"awati@amazon.com","login":null,"count":2},{"name":"Dekel Pilli","email":"dekelpilli@gmail.com","login":"dekelpilli","count":2},{"name":"Mark Sailes","email":"45629314+msailes","login":"msailes","count":2},{"name":"Michael Ennen","email":"brcolow","login":"brcolow","count":2},{"name":"Ramiro Aparicio","email":"rapariciog@gmail.com","login":"friscoMad","count":2},{"name":"Lu Peng","email":"61207760+lupengamzn","login":"lupengamzn","count":2},{"name":"Nathaniel Ruiz Nowell","email":"enruizno@uwaterloo.ca","login":"NathanielRN","count":1},{"name":"Rohit Nair","email":"rohitnair5@gmail.com","login":"rohitnair","count":1},{"name":"Rudy Alvarez","email":"rudygt@gmail.com","login":"rudygt","count":1},{"name":"Srikant Sistla","email":"26775228+ss2305","login":"ss2305","count":1},{"name":"Stefan Norberg","email":"stefan@norberg.org","login":"stnor","count":1},{"name":"Steve Liu","email":"liustve@amazon.com","login":"liustve","count":1},{"name":"Steve Peters","email":"steve@fisharerojo.org","login":"smpeters","count":1},{"name":"chang-chao","email":"chang-chao@hotmail.com","login":"chang-chao","count":1},{"name":"kwalczak","email":"kwalczak","login":"kwalczak","count":1},{"name":"manofthepeace","email":"13215031+manofthepeace","login":"manofthepeace","count":1},{"name":"tsuttsu305","email":"shinichi.tsuji@asia-quest.jp","login":null,"count":1},{"name":"Mike Waters","email":"mike.waters@digitalglobe.com","login":null,"count":1},{"name":"Algae666","email":"algae@apple.com","login":null,"count":1},{"name":"mwunderl","email":"mwunderl@amazon.com","login":"mwunderl","count":1},{"name":"productivityindustries","email":"65662367+productivityindustries","login":"productivityindustries","count":1},{"name":"zzhlogin","email":"zzhlogin@amazon.com","login":"zzhlogin","count":1},{"name":"Mike Friesen","email":"mfriesen@gmail.com","login":"mfriesen","count":1},{"name":"Liu, Zhengyang","email":"zhengyal@amazon.com","login":"zhengyal","count":1},{"name":"Kaushal Partani","email":"partani@amazon.com","login":"aws-kaushal-partani","count":1},{"name":"John Knollmeyer","email":"jknollm@amazon.com","login":"jknollmeyer","count":1},{"name":"Jared Hatfield","email":"jjhatf02@gmail.com","login":"JaredHatfield","count":1},{"name":"Jagveer Loky","email":"jagveer.loky@gmail.com","login":"jagveer-loky","count":1},{"name":"Jacob Peddicord","email":"jpeddicord","login":"jpeddicord","count":1},{"name":"Henri Yandell","email":"hyandell","login":"hyandell","count":1},{"name":"Guy Lichtman","email":"1395797+glicht","login":"glicht","count":1},{"name":"Evgeniy Sokolov","email":"evgeniy.sokolov@gmail.com","login":"eugine","count":1},{"name":"David Venable","email":"david@venable.io","login":"dlvenable","count":1},{"name":"Ashley Mercer","email":"13454082+ashleymercer","login":"ashleymercer","count":1},{"name":"Anuraag Agrawal","email":"anuraaga@gmail.com","login":"anuraaga","count":1},{"name":"Ahmed Kamel","email":"humanzz@hotmail.com","login":"humanzz","count":1},{"name":"Adrian Cole","email":"adriancole","login":"adriancole","count":1},{"name":"Aapo Laitinen","email":"aapo@amazon.com","login":"aapolait","count":1}],"past_year_committers":[{"name":"Thomas Pierce","email":"thp@amazon.com","login":"thpierce","count":8},{"name":"Jonathan Lee","email":"107072447+jj22ee","login":"jj22ee","count":5},{"name":"Eric Zhang","email":"eric.zhang6811@gmail.com","login":"ezhang6811","count":5},{"name":"Prashant Srivastava","email":"50466688+srprash","login":"srprash","count":4},{"name":"Vastin","email":"3690049+vastin","login":"vastin","count":1},{"name":"Steve Liu","email":"liustve@amazon.com","login":"liustve","count":1},{"name":"Luke (GuangHui) Zhang","email":"lukezha@amazon.com","login":"lukeina2z","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-08-20T00:00:10.776Z","repositories_count":6759862,"commits_count":979839772,"contributors_count":41298045,"owners_count":1360935,"committers_count":3355342,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"aws/aws-xray-sdk-java","html_url":"https://github.com/aws/aws-xray-sdk-java","last_synced_at":"2026-08-21T19:31:45.828Z","status":null,"issues_count":66,"pull_requests_count":126,"avg_time_to_close_issue":10656193.64,"avg_time_to_close_pull_request":536833.8474576271,"issues_closed_count":25,"pull_requests_closed_count":118,"pull_request_authors_count":27,"issue_authors_count":58,"avg_comments_per_issue":3.121212121212121,"avg_comments_per_pull_request":0.5476190476190477,"merged_pull_requests_count":108,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1588.0,"past_year_avg_time_to_close_pull_request":377948.90476190473,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":21,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.09090909090909091,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":19,"created_at":"2023-05-15T09:20:28.961Z","updated_at":"2026-08-21T19:31:45.829Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-xray-sdk-java/issues","issue_labels_count":{"table":{"enhancement":13,"bug":4,"question":3,"pending release":2,"feature request":1,"documentation":1}},"pull_request_labels_count":{"table":{"bug":2,"pending release":1}},"issue_author_associations_count":{"table":{"NONE":54,"CONTRIBUTOR":12}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":121,"NONE":5}},"issue_authors":{"table":{"kjhok1811":3,"feizhangyong":3,"Kurru":2,"gautam-nutalapati":2,"smoell":2,"xendo":2,"ygrenzinger":1,"Swish4114":1,"digithead1011":1,"verbitan":1,"chaitanguttarlapalli":1,"HamzaOralK":1,"girotomas":1,"jakubgruber":1,"Ftwpker":1,"narras-oss":1,"aajtodd":1,"millems":1,"oleksandr-skoryi":1,"IDUN-BogdanPi":1,"Morras":1,"minstack":1,"humanzz":1,"aws-kj":1,"dyang108":1,"NathanielRN":1,"isururandika":1,"piotrmackowiak":1,"ramkumar-mn":1,"ambethell":1,"chanchiem":1,"lishenwp":1,"scottgerring":1,"Ale0x78":1,"epomatti":1,"task4233":1,"wangzlei":1,"yogiraj07":1,"productivityindustries":1,"PiotrWu":1,"FieryCod":1,"balaravichandran097":1,"FrontierPsychiatrist":1,"shearn89":1,"lucaas-webpi":1,"ashleymercer":1,"Zhenye-Na":1,"MostafaaRamadan":1,"andreas-trvlk":1,"factorypoint":1,"shengxil":1,"jeroenvandevelde":1,"willarmiros":1,"bvingerh":1,"copumpkin":1,"kimor79":1,"jj22ee":1,"NoMemoryError":1}},"pull_request_authors":{"table":{"srprash":20,"atshaw43":18,"majanjua-amzn":15,"jj22ee":13,"willarmiros":9,"wangzlei":9,"thpierce":7,"vastin":6,"Kurru":4,"anuraaga":3,"msailes":2,"zzhlogin":2,"ezhang6811":2,"lukeina2z":2,"bhautikpip":2,"humanzz":1,"brcolow":1,"liustve":1,"hden":1,"rohitnair":1,"lupengamzn":1,"productivityindustries":1,"NathanielRN":1,"eugine":1,"jagveer-loky":1,"manofthepeace":1,"rudygt":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-08-22T00:00:08.916Z","repositories_count":16249919,"issues_count":42009251,"pull_requests_count":133984590,"authors_count":11498780,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{}},"past_year_pull_request_labels_count":{"table":{}},"past_year_issue_author_associations_count":{"table":{"CONTRIBUTOR":1}},"past_year_pull_request_author_associations_count":{"table":{"CONTRIBUTOR":21,"NONE":1}},"past_year_issue_authors":{"table":{"jj22ee":1}},"past_year_pull_request_authors":{"table":{"jj22ee":6,"thpierce":6,"srprash":4,"ezhang6811":2,"lukeina2z":2,"liustve":1,"vastin":1}},"maintainers":[],"active_maintainers":[]}},"events":{"total":{"CreateEvent":15,"DeleteEvent":9,"ForkEvent":4,"IssueCommentEvent":14,"IssuesEvent":6,"PullRequestEvent":23,"PullRequestReviewCommentEvent":13,"PullRequestReviewEvent":23,"PushEvent":28,"ReleaseEvent":1,"WatchEvent":2},"last_year":{"CreateEvent":8,"DeleteEvent":5,"ForkEvent":1,"IssueCommentEvent":3,"IssuesEvent":1,"PullRequestEvent":12,"PullRequestReviewCommentEvent":3,"PullRequestReviewEvent":7,"PushEvent":14,"ReleaseEvent":1,"WatchEvent":1}},"keywords":[],"dependencies":[{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-apache-http/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:22.269Z","updated_at":"2022-07-21T04:49:22.269Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-apache-http/build.gradle.kts","dependencies":[{"id":339188470,"package_name":"org.apache.httpcomponents:httpclient","ecosystem":"maven","requirements":"4.5.13","direct":true,"kind":"api","optional":false},{"id":339188475,"package_name":"com.github.tomakehurst:wiremock-jre8","ecosystem":"maven","requirements":"*","direct":true,"kind":"testImplementation","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-aws-sdk/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:22.592Z","updated_at":"2022-07-21T04:49:22.592Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-aws-sdk/build.gradle.kts","dependencies":[{"id":339193025,"package_name":"com.amazonaws:aws-java-sdk-core","ecosystem":"maven","requirements":"1.12.228","direct":true,"kind":"api","optional":false},{"id":339193028,"package_name":"com.amazonaws:aws-java-sdk-lambda","ecosystem":"maven","requirements":"1.12.228","direct":true,"kind":"testImplementation","optional":false},{"id":339193029,"package_name":"com.amazonaws:aws-java-sdk-s3","ecosystem":"maven","requirements":"1.12.228","direct":true,"kind":"testImplementation","optional":false},{"id":339193031,"package_name":"com.amazonaws:aws-java-sdk-sns","ecosystem":"maven","requirements":"1.12.228","direct":true,"kind":"testImplementation","optional":false},{"id":339193033,"package_name":"org.powermock:powermock-reflect","ecosystem":"maven","requirements":"2.0.2","direct":true,"kind":"testImplementation","optional":false},{"id":339193035,"package_name":"org.skyscreamer:jsonassert","ecosystem":"maven","requirements":"1.3.0","direct":true,"kind":"testImplementation","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-aws-sdk-core/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:22.826Z","updated_at":"2022-07-21T04:49:22.826Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-aws-sdk-core/build.gradle.kts","dependencies":[{"id":339193532,"package_name":"com.fasterxml.jackson.core:jackson-annotations","ecosystem":"maven","requirements":"*","direct":true,"kind":"compileOnly","optional":false},{"id":339193533,"package_name":"com.fasterxml.jackson.core:jackson-databind","ecosystem":"maven","requirements":"*","direct":true,"kind":"testImplementation","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-aws-sdk-v2/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:22.931Z","updated_at":"2022-07-21T04:49:22.931Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-aws-sdk-v2/build.gradle.kts","dependencies":[{"id":339193778,"package_name":"software.amazon.awssdk:aws-core","ecosystem":"maven","requirements":"2.15.20","direct":true,"kind":"api","optional":false},{"id":339193779,"package_name":"org.skyscreamer:jsonassert","ecosystem":"maven","requirements":"1.3.0","direct":true,"kind":"testImplementation","optional":false},{"id":339193780,"package_name":"software.amazon.awssdk:dynamodb","ecosystem":"maven","requirements":"2.15.20","direct":true,"kind":"testImplementation","optional":false},{"id":339193781,"package_name":"software.amazon.awssdk:lambda","ecosystem":"maven","requirements":"2.15.20","direct":true,"kind":"testImplementation","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-core/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:23.032Z","updated_at":"2022-07-21T04:49:23.032Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-core/build.gradle.kts","dependencies":[{"id":339194099,"package_name":"com.amazonaws:aws-java-sdk-xray","ecosystem":"maven","requirements":"1.12.228","direct":true,"kind":"api","optional":false},{"id":339194100,"package_name":"com.google.code.findbugs:jsr305","ecosystem":"maven","requirements":"3.0.2","direct":true,"kind":"compileOnly","optional":false},{"id":339194101,"package_name":"javax.servlet:javax.servlet-api","ecosystem":"maven","requirements":"3.1.0","direct":true,"kind":"compileOnly","optional":false},{"id":339194102,"package_name":"com.fasterxml.jackson.datatype:jackson-datatype-jsr310","ecosystem":"maven","requirements":"*","direct":true,"kind":"testImplementation","optional":false},{"id":339194103,"package_name":"com.github.stefanbirkner:system-rules","ecosystem":"maven","requirements":"1.16.0","direct":true,"kind":"testImplementation","optional":false},{"id":339194104,"package_name":"com.github.tomakehurst:wiremock-jre8","ecosystem":"maven","requirements":"*","direct":true,"kind":"testImplementation","optional":false},{"id":339194105,"package_name":"org.openjdk.jmh:jmh-core","ecosystem":"maven","requirements":"1.19","direct":true,"kind":"testImplementation","optional":false},{"id":339194106,"package_name":"org.powermock:powermock-module-junit4","ecosystem":"maven","requirements":"2.0.7","direct":true,"kind":"testImplementation","optional":false},{"id":339194107,"package_name":"org.powermock:powermock-api-mockito2","ecosystem":"maven","requirements":"2.0.7","direct":true,"kind":"testImplementation","optional":false},{"id":339194108,"package_name":"org.skyscreamer:jsonassert","ecosystem":"maven","requirements":"1.3.0","direct":true,"kind":"testImplementation","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-log4j/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:23.134Z","updated_at":"2022-07-21T04:49:23.134Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-log4j/build.gradle.kts","dependencies":[{"id":339194150,"package_name":"org.apache.logging.log4j:log4j-api","ecosystem":"maven","requirements":"2.17.0","direct":true,"kind":"compileOnly","optional":false},{"id":339194151,"package_name":"org.apache.logging.log4j:log4j-api","ecosystem":"maven","requirements":"2.17.0","direct":true,"kind":"testImplementation","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-metrics/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:23.214Z","updated_at":"2022-07-21T04:49:23.214Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-metrics/build.gradle.kts","dependencies":[{"id":339195341,"package_name":"com.github.stefanbirkner:system-rules","ecosystem":"maven","requirements":"1.16.0","direct":true,"kind":"testImplementation","optional":false},{"id":339195342,"package_name":"org.powermock:powermock-module-junit4","ecosystem":"maven","requirements":"2.0.2","direct":true,"kind":"testImplementation","optional":false},{"id":339195343,"package_name":"org.powermock:powermock-api-mockito2","ecosystem":"maven","requirements":"2.0.2","direct":true,"kind":"testImplementation","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-slf4j/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:23.362Z","updated_at":"2022-07-21T04:49:23.362Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-slf4j/build.gradle.kts","dependencies":[{"id":339196669,"package_name":"org.slf4j:slf4j-api","ecosystem":"maven","requirements":"1.7.30","direct":true,"kind":"compileOnly","optional":false},{"id":339196672,"package_name":"ch.qos.logback:logback-classic","ecosystem":"maven","requirements":"1.3.0-alpha5","direct":true,"kind":"testImplementation","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-spring/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:23.774Z","updated_at":"2022-07-21T04:49:23.774Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-spring/build.gradle.kts","dependencies":[{"id":339199630,"package_name":"org.aspectj:aspectjrt","ecosystem":"maven","requirements":"1.8.11","direct":true,"kind":"api","optional":false},{"id":339199631,"package_name":"org.springframework:spring-context-support","ecosystem":"maven","requirements":"5.3.18","direct":true,"kind":"implementation","optional":false},{"id":339199632,"package_name":"org.springframework:spring-context","ecosystem":"maven","requirements":"5.3.18","direct":true,"kind":"implementation","optional":false},{"id":339199633,"package_name":"org.springframework:spring-aspects","ecosystem":"maven","requirements":"5.3.18","direct":true,"kind":"implementation","optional":false},{"id":339199634,"package_name":"org.springframework.data:spring-data-commons","ecosystem":"maven","requirements":"2.6.3","direct":true,"kind":"compileOnly","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-sql/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:24.165Z","updated_at":"2022-07-21T04:49:24.165Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-sql/build.gradle.kts","dependencies":[{"id":339203800,"package_name":"com.blogspot.mydailyjava:weak-lock-free","ecosystem":"maven","requirements":"0.18","direct":true,"kind":"implementation","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-sql-mysql/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:24.426Z","updated_at":"2022-07-21T04:49:24.426Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-sql-mysql/build.gradle.kts","dependencies":[{"id":339210354,"package_name":"org.apache.tomcat:tomcat-jdbc","ecosystem":"maven","requirements":"8.0.36","direct":true,"kind":"compileOnly","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-sql-postgres/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2022-07-21T04:49:24.791Z","updated_at":"2022-07-21T04:49:24.791Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-sql-postgres/build.gradle.kts","dependencies":[{"id":339211918,"package_name":"org.apache.tomcat:tomcat-jdbc","ecosystem":"maven","requirements":"8.0.36","direct":true,"kind":"compileOnly","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/continuous-monitoring.yml","sha":null,"kind":"manifest","created_at":"2023-01-14T05:50:16.768Z","updated_at":"2023-01-14T05:50:16.768Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/.github/workflows/continuous-monitoring.yml","dependencies":[{"id":6892647870,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6892647871,"package_name":"aws-actions/configure-aws-credentials","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6892647872,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6892647873,"package_name":"actions/cache","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/master-build.yml","sha":null,"kind":"manifest","created_at":"2023-01-14T05:50:16.793Z","updated_at":"2023-01-14T05:50:16.793Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/.github/workflows/master-build.yml","dependencies":[{"id":6892647874,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6892647875,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6892647876,"package_name":"actions/cache","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6892647877,"package_name":"codecov/codecov-action","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6892647878,"package_name":"actions/upload-artifact","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/pr-build.yml","sha":null,"kind":"manifest","created_at":"2023-01-14T05:50:16.839Z","updated_at":"2023-01-14T05:50:16.839Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/.github/workflows/pr-build.yml","dependencies":[{"id":6892647879,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6892647880,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6892647881,"package_name":"actions/cache","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6892647882,"package_name":"codecov/codecov-action","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6892647883,"package_name":"actions/upload-artifact","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/release-build.yml","sha":null,"kind":"manifest","created_at":"2023-01-14T05:50:16.863Z","updated_at":"2023-01-14T05:50:16.863Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/.github/workflows/release-build.yml","dependencies":[{"id":6892647884,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6892647885,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6892647886,"package_name":"actions/cache","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6892647887,"package_name":"actions/create-release","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-lambda/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2023-01-14T05:50:16.920Z","updated_at":"2023-01-14T05:50:16.920Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-lambda/build.gradle.kts","dependencies":[{"id":6892647888,"package_name":"com.amazonaws:aws-lambda-java-events","ecosystem":"maven","requirements":"3.11.0","direct":true,"kind":"compileOnly","optional":false},{"id":6892647889,"package_name":"com.amazonaws:aws-lambda-java-events","ecosystem":"maven","requirements":"3.11.0","direct":true,"kind":"testImplementation","optional":false},{"id":6892647890,"package_name":"org.powermock:powermock-module-junit4","ecosystem":"maven","requirements":"2.0.7","direct":true,"kind":"testImplementation","optional":false}]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-aws-sdk-instrumentor/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2023-12-01T18:46:27.549Z","updated_at":"2023-12-01T18:46:27.549Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-aws-sdk-instrumentor/build.gradle.kts","dependencies":[]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2023-12-01T18:46:27.858Z","updated_at":"2023-12-01T18:46:27.858Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-aws-sdk-v2-instrumentor/build.gradle.kts","dependencies":[]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-benchmark/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2023-12-01T18:46:27.959Z","updated_at":"2023-12-01T18:46:27.959Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-benchmark/build.gradle.kts","dependencies":[]},{"ecosystem":"maven","filepath":"aws-xray-recorder-sdk-bom/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2023-12-01T18:46:27.979Z","updated_at":"2023-12-01T18:46:27.979Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/aws-xray-recorder-sdk-bom/build.gradle.kts","dependencies":[]},{"ecosystem":"maven","filepath":"build.gradle.kts","sha":null,"kind":"manifest","created_at":"2023-12-01T18:46:28.036Z","updated_at":"2023-12-01T18:46:28.036Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/build.gradle.kts","dependencies":[]},{"ecosystem":"maven","filepath":"dependencyManagement/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2023-12-01T18:46:28.046Z","updated_at":"2023-12-01T18:46:28.046Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/dependencyManagement/build.gradle.kts","dependencies":[]},{"ecosystem":"maven","filepath":"jacoco/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2023-12-01T18:46:28.058Z","updated_at":"2023-12-01T18:46:28.058Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/jacoco/build.gradle.kts","dependencies":[]},{"ecosystem":"maven","filepath":"smoke-tests/build.gradle.kts","sha":null,"kind":"manifest","created_at":"2023-12-01T18:46:28.068Z","updated_at":"2023-12-01T18:46:28.068Z","repository_link":"https://github.com/aws/aws-xray-sdk-java/blob/master/smoke-tests/build.gradle.kts","dependencies":[]}],"score":24.45607554396865,"created_at":"2025-05-07T22:14:03.219Z","updated_at":"2026-08-22T20:02:14.655Z","avatar_url":"https://github.com/aws.png","language":"Java","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/360599","html_url":"https://summary.ecosyste.ms/projects/360599"}