{"id":368037,"url":"https://github.com/aws/aws-secretsmanager-caching-java","last_synced_at":"2026-06-21T08:02:31.618Z","repository":{"id":33422197,"uuid":"154230005","full_name":"aws/aws-secretsmanager-caching-java","owner":"aws","description":"The AWS Secrets Manager Java caching client enables in-process caching of secrets for Java applications.","archived":false,"fork":false,"pushed_at":"2026-06-09T12:13:02.000Z","size":135,"stargazers_count":79,"open_issues_count":8,"forks_count":39,"subscribers_count":13,"default_branch":"v2","last_synced_at":"2026-06-15T06:04:08.631Z","etag":null,"topics":["aws-secrets-manager","caching","java","secret"],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-10-22T23:19:14.000Z","updated_at":"2026-04-14T00:03:05.000Z","dependencies_parsed_at":"2026-03-18T11:01:21.615Z","dependency_job_id":"5f46979f-f48c-4277-9650-3bb380fdb65f","html_url":"https://github.com/aws/aws-secretsmanager-caching-java","commit_stats":{"total_commits":29,"total_committers":7,"mean_commits":4.142857142857143,"dds":0.6551724137931034,"last_synced_commit":"2d42f76af59568ec2151e000a27bd12f78a03c77"},"previous_names":[],"tags_count":8,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-secretsmanager-caching-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-secretsmanager-caching-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-secretsmanager-caching-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-secretsmanager-caching-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-secretsmanager-caching-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-secretsmanager-caching-java/tar.gz/refs/heads/v2","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-secretsmanager-caching-java/sbom","scorecard":{"id":219437,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-secretsmanager-caching-java","commit":"bd10a5a9a47a6742525e297aa6c09f713d986654"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.1,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":7,"reason":"Found 16/22 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/maven.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":2,"reason":"3 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-secretsmanager-caching-java/codeql-analysis.yml/v2?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-secretsmanager-caching-java/codeql-analysis.yml/v2?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-secretsmanager-caching-java/codeql-analysis.yml/v2?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-secretsmanager-caching-java/codeql-analysis.yml/v2?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-secretsmanager-caching-java/maven.yml/v2?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-secretsmanager-caching-java/maven.yml/v2?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/maven.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-secretsmanager-caching-java/maven.yml/v2?enable=pin","Info:   0 out of   6 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 2.0.0 not signed: https://api.github.com/repos/aws/aws-secretsmanager-caching-java/releases/117684448","Warn: release artifact 1.0.2 not signed: https://api.github.com/repos/aws/aws-secretsmanager-caching-java/releases/58646332","Warn: release artifact 1.0.1 not signed: https://api.github.com/repos/aws/aws-secretsmanager-caching-java/releases/21102948","Warn: release artifact 1.0.0 not signed: https://api.github.com/repos/aws/aws-secretsmanager-caching-java/releases/14053134","Warn: release artifact 2.0.0 does not have provenance: https://api.github.com/repos/aws/aws-secretsmanager-caching-java/releases/117684448","Warn: release artifact 1.0.2 does not have provenance: https://api.github.com/repos/aws/aws-secretsmanager-caching-java/releases/58646332","Warn: release artifact 1.0.1 does not have provenance: https://api.github.com/repos/aws/aws-secretsmanager-caching-java/releases/21102948","Warn: release artifact 1.0.0 does not have provenance: https://api.github.com/repos/aws/aws-secretsmanager-caching-java/releases/14053134"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(master): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-389x-839f-4rhx","Warn: Project is vulnerable to: GHSA-xq3w-v528-46rv","Warn: Project is vulnerable to: GHSA-4g8c-wm8x-jfhw"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 5 commits out of 24 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T02:12:12.576Z","repository_id":33422197,"created_at":"2025-08-17T02:12:12.576Z","updated_at":"2025-08-17T02:12:12.576Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34479553,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-18T02:00:06.871Z","response_time":128,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":536,"last_synced_at":"2026-03-02T20:07:16.924Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":245963,"followers":14738,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2026-03-02T20:07:16.924Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"packages":[{"id":4652913,"name":"com.amazonaws.secretsmanager:aws-secretsmanager-caching-java","ecosystem":"maven","description":"AWS Secrets Manager caching client for Java","homepage":"https://github.com/aws/aws-secretsmanager-caching-java","licenses":"Apache License, Version 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/aws/aws-secretsmanager-caching-java","keywords_array":[],"namespace":"com.amazonaws.secretsmanager","versions_count":8,"first_release_published_at":"2018-11-16T20:58:52.000Z","latest_release_published_at":"2026-03-12T22:53:14.000Z","latest_release_number":"2.2.0","last_synced_at":"2026-06-18T10:13:36.571Z","created_at":"2022-07-25T16:35:29.385Z","updated_at":"2026-06-18T10:13:36.571Z","registry_url":"https://central.sonatype.com/artifact/com.amazonaws.secretsmanager/aws-secretsmanager-caching-java/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.amazonaws.secretsmanager/aws-secretsmanager-caching-java/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":33422197,"uuid":"154230005","full_name":"aws/aws-secretsmanager-caching-java","owner":"aws","description":"The AWS Secrets Manager Java caching client enables in-process caching of secrets for Java applications.","archived":false,"fork":false,"pushed_at":"2025-10-13T12:43:33.000Z","size":103,"stargazers_count":77,"open_issues_count":8,"forks_count":35,"subscribers_count":13,"default_branch":"v2","last_synced_at":"2025-11-02T17:02:39.303Z","etag":null,"topics":["aws-secrets-manager","caching","java","secret"],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aws.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-10-22T23:19:14.000Z","updated_at":"2025-10-02T00:54:11.000Z","dependencies_parsed_at":"2024-02-16T20:28:59.605Z","dependency_job_id":"92fffa6c-3280-4b15-b4c0-ea86da856a1d","html_url":"https://github.com/aws/aws-secretsmanager-caching-java","commit_stats":{"total_commits":29,"total_committers":7,"mean_commits":4.142857142857143,"dds":0.6551724137931034,"last_synced_commit":"2d42f76af59568ec2151e000a27bd12f78a03c77"},"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/aws/aws-secretsmanager-caching-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-secretsmanager-caching-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-secretsmanager-caching-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-secretsmanager-caching-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-secretsmanager-caching-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","download_url":"https://codeload.github.com/aws/aws-secretsmanager-caching-java/tar.gz/refs/heads/v2","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-secretsmanager-caching-java/sbom","scorecard":{"id":219437,"data":{"date":"2025-08-11","repo":{"name":"github.com/aws/aws-secretsmanager-caching-java","commit":"bd10a5a9a47a6742525e297aa6c09f713d986654"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.1,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":7,"reason":"Found 16/22 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/maven.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":2,"reason":"3 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-secretsmanager-caching-java/codeql-analysis.yml/v2?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-secretsmanager-caching-java/codeql-analysis.yml/v2?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-secretsmanager-caching-java/codeql-analysis.yml/v2?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-secretsmanager-caching-java/codeql-analysis.yml/v2?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-secretsmanager-caching-java/maven.yml/v2?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-secretsmanager-caching-java/maven.yml/v2?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/maven.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-secretsmanager-caching-java/maven.yml/v2?enable=pin","Info:   0 out of   6 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 2.0.0 not signed: https://api.github.com/repos/aws/aws-secretsmanager-caching-java/releases/117684448","Warn: release artifact 1.0.2 not signed: https://api.github.com/repos/aws/aws-secretsmanager-caching-java/releases/58646332","Warn: release artifact 1.0.1 not signed: https://api.github.com/repos/aws/aws-secretsmanager-caching-java/releases/21102948","Warn: release artifact 1.0.0 not signed: https://api.github.com/repos/aws/aws-secretsmanager-caching-java/releases/14053134","Warn: release artifact 2.0.0 does not have provenance: https://api.github.com/repos/aws/aws-secretsmanager-caching-java/releases/117684448","Warn: release artifact 1.0.2 does not have provenance: https://api.github.com/repos/aws/aws-secretsmanager-caching-java/releases/58646332","Warn: release artifact 1.0.1 does not have provenance: https://api.github.com/repos/aws/aws-secretsmanager-caching-java/releases/21102948","Warn: release artifact 1.0.0 does not have provenance: https://api.github.com/repos/aws/aws-secretsmanager-caching-java/releases/14053134"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/aws/.github/SECURITY.md:1","Info: Found linked content: github.com/aws/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/aws/.github/SECURITY.md:1","Info: Found text in security policy: github.com/aws/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(master): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":7,"reason":"3 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-389x-839f-4rhx","Warn: Project is vulnerable to: GHSA-xq3w-v528-46rv","Warn: Project is vulnerable to: GHSA-4g8c-wm8x-jfhw"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 5 commits out of 24 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T02:12:12.576Z","repository_id":33422197,"created_at":"2025-08-17T02:12:12.576Z","updated_at":"2025-08-17T02:12:12.576Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283064897,"owners_count":26773268,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-06T02:00:06.180Z","response_time":55,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"aws","name":"Amazon Web Services","uuid":"2232217","kind":"organization","description":"","email":"open-source-github@amazon.com","website":"https://amazon.com/aws","location":"United States of America","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2232217?v=4","repositories_count":509,"last_synced_at":"2025-10-19T22:54:00.183Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/aws","funding_links":[],"total_stars":237333,"followers":13375,"following":0,"created_at":"2022-11-02T16:20:18.436Z","updated_at":"2025-10-19T22:54:00.183Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aws/repositories"},"tags":[{"name":"2.0.0","sha":"2f8251e91ee3cf038eeb111603cdb3106e3da671","kind":"commit","published_at":"2023-08-17T20:05:46.000Z","download_url":"https://codeload.github.com/aws/aws-secretsmanager-caching-java/tar.gz/2.0.0","html_url":"https://github.com/aws/aws-secretsmanager-caching-java/releases/tag/2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-secretsmanager-caching-java@2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-secretsmanager-caching-java/tags/2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-secretsmanager-caching-java/tags/2.0.0/manifests"},{"name":"1.0.2","sha":"0e78ab4b0b1c0c5e69130ae8884637e9254af3b4","kind":"commit","published_at":"2022-01-28T17:49:20.000Z","download_url":"https://codeload.github.com/aws/aws-secretsmanager-caching-java/tar.gz/1.0.2","html_url":"https://github.com/aws/aws-secretsmanager-caching-java/releases/tag/1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-secretsmanager-caching-java@1.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-secretsmanager-caching-java/tags/1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-secretsmanager-caching-java/tags/1.0.2/manifests"},{"name":"1.0.1","sha":"fa0ec1e94e96e5b658146bd8601e3b79e1d18905","kind":"commit","published_at":"2019-10-30T21:05:35.000Z","download_url":"https://codeload.github.com/aws/aws-secretsmanager-caching-java/tar.gz/1.0.1","html_url":"https://github.com/aws/aws-secretsmanager-caching-java/releases/tag/1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-secretsmanager-caching-java@1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-secretsmanager-caching-java/tags/1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-secretsmanager-caching-java/tags/1.0.1/manifests"},{"name":"1.0.0","sha":"67613cd0ca89d44cbf65f5111bf1493a56b1c2f7","kind":"commit","published_at":"2018-11-14T22:39:01.000Z","download_url":"https://codeload.github.com/aws/aws-secretsmanager-caching-java/tar.gz/1.0.0","html_url":"https://github.com/aws/aws-secretsmanager-caching-java/releases/tag/1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/aws/aws-secretsmanager-caching-java@1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-secretsmanager-caching-java/tags/1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-secretsmanager-caching-java/tags/1.0.0/manifests"}]},"repo_metadata_updated_at":"2025-11-10T21:14:49.305Z","dependent_packages_count":7,"downloads":null,"downloads_period":null,"dependent_repos_count":104,"rankings":{"downloads":null,"dependent_repos_count":1.9098178293719852,"dependent_packages_count":9.703084104476268,"stargazers_count":30.7110802275681,"forks_count":26.49634437197492,"docker_downloads_count":1.0383145061648047,"average":13.971728207911216},"purl":"pkg:maven/com.amazonaws.secretsmanager/aws-secretsmanager-caching-java","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.amazonaws.secretsmanager:aws-secretsmanager-caching-java","docker_dependents_count":49,"docker_downloads_count":22664122,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.amazonaws.secretsmanager:aws-secretsmanager-caching-java","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.amazonaws.secretsmanager:aws-secretsmanager-caching-java/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-10T21:07:16.464Z","issues_count":14,"pull_requests_count":199,"avg_time_to_close_issue":26486650.2,"avg_time_to_close_pull_request":9015633.720238095,"issues_closed_count":10,"pull_requests_closed_count":168,"pull_request_authors_count":13,"issue_authors_count":14,"avg_comments_per_issue":2.0,"avg_comments_per_pull_request":1.1809045226130652,"merged_pull_requests_count":22,"bot_issues_count":0,"bot_pull_requests_count":165,"past_year_issues_count":1,"past_year_pull_requests_count":84,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1414061.8596491227,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":57,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.7142857142857143,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":71,"past_year_merged_pull_requests_count":8,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-secretsmanager-caching-java/issues","maintainers":[{"login":"ThirdEyeSqueegee","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ThirdEyeSqueegee"}],"active_maintainers":[{"login":"ThirdEyeSqueegee","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ThirdEyeSqueegee"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws.secretsmanager:aws-secretsmanager-caching-java/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws.secretsmanager:aws-secretsmanager-caching-java/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws.secretsmanager:aws-secretsmanager-caching-java/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws.secretsmanager:aws-secretsmanager-caching-java/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws.secretsmanager:aws-secretsmanager-caching-java/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.amazonaws.secretsmanager:aws-secretsmanager-caching-java/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}}],"commits":{"id":2209454,"full_name":"aws/aws-secretsmanager-caching-java","default_branch":"v2","total_commits":52,"total_committers":11,"total_bot_commits":8,"total_bot_committers":1,"mean_commits":4.7272727272727275,"dds":0.6730769230769231,"past_year_total_commits":15,"past_year_total_committers":6,"past_year_total_bot_commits":3,"past_year_total_bot_committers":1,"past_year_mean_commits":2.5,"past_year_dds":0.6666666666666667,"last_synced_at":"2026-06-18T07:01:16.016Z","last_synced_commit":"dc47d680455fd1a1fe7a6d06701e3e17b1905a80","created_at":"2024-10-03T21:08:02.520Z","updated_at":"2026-06-18T07:00:36.833Z","committers":[{"name":"Simon Marty","email":"simon.marty0@gmail.com","login":"simonmarty","count":17},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":8},{"name":"Jacob Peddicord","email":"jpeddicord","login":"jpeddicord","count":7},{"name":"Vedant Jaiswal","email":"64425231+vedant-jaiswal","login":"vedant-jaiswal","count":5},{"name":"George Bailey","email":"gbailey","login":"gbailey","count":5},{"name":"Will Tong","email":"willtong@amazon.com","login":"willtong1234","count":3},{"name":"Caitlin Russell","email":"73604262+crus-umich","login":"crus-umich","count":2},{"name":"Will Tong","email":"willtong@aws-mimir-ops-corp-60001.pdx1.corp.amazon.com","login":null,"count":2},{"name":"Sumit Rawat","email":"59278479+i-am-SR","login":"i-am-SR","count":1},{"name":"Dan Mancuso","email":"106838123+danmancuso","login":"danmancuso","count":1},{"name":"Angad","email":"66992519+ThirdEyeSqueegee","login":"ThirdEyeSqueegee","count":1}],"past_year_committers":[{"name":"Vedant Jaiswal","email":"64425231+vedant-jaiswal","login":"vedant-jaiswal","count":5},{"name":"Simon Marty","email":"simon.marty0@gmail.com","login":"simonmarty","count":4},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":3},{"name":"Sumit Rawat","email":"59278479+i-am-SR","login":"i-am-SR","count":1},{"name":"Caitlin Russell","email":"73604262+crus-umich","login":"crus-umich","count":1},{"name":"Angad","email":"66992519+ThirdEyeSqueegee","login":"ThirdEyeSqueegee","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-secretsmanager-caching-java/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-06-20T00:00:10.001Z","repositories_count":6264668,"commits_count":875359038,"contributors_count":35087202,"owners_count":1169099,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"aws/aws-secretsmanager-caching-java","html_url":"https://github.com/aws/aws-secretsmanager-caching-java","last_synced_at":"2026-06-18T07:00:22.891Z","status":"active","issues_count":14,"pull_requests_count":218,"avg_time_to_close_issue":26486650.2,"avg_time_to_close_pull_request":8648639.868131869,"issues_closed_count":10,"pull_requests_closed_count":182,"pull_request_authors_count":15,"issue_authors_count":14,"avg_comments_per_issue":2.0,"avg_comments_per_pull_request":1.2339449541284404,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":180,"past_year_issues_count":0,"past_year_pull_requests_count":26,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":3517074.6,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":15,"past_year_pull_request_authors_count":4,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":1.4230769230769231,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":20,"past_year_merged_pull_requests_count":4,"created_at":"2023-05-15T09:20:07.867Z","updated_at":"2026-06-18T07:00:22.892Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-secretsmanager-caching-java","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/aws%2Faws-secretsmanager-caching-java/issues","issue_labels_count":{"table":{"enhancement":4,"bug":2}},"pull_request_labels_count":{"table":{"dependencies":180,"java":153,"github_actions":27,"enhancement":3,"bug":1}},"issue_author_associations_count":{"table":{"NONE":14}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":208,"NONE":6,"MEMBER":4}},"issue_authors":{"table":{"Rabadash8820":1,"kuraun":1,"GrahamLea":1,"anujhydrabadi":1,"davestimpert":1,"janario":1,"InforBG":1,"jswk":1,"arjunsk":1,"cmorgia":1,"davecramer":1,"github-oleksandr-kondrakhin":1,"pmeinhardt":1,"githorse":1}},"pull_request_authors":{"table":{"dependabot[bot]":180,"simonmarty":16,"ThirdEyeSqueegee":4,"willtong1234":4,"InforBG":2,"vedant-jaiswal":2,"gbailey":2,"crus-umich":1,"sullis":1,"FMPOC":1,"kuraun":1,"linzhangUCA":1,"oridool":1,"danmancuso":1,"i-am-SR":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-06-20T00:00:09.966Z","repositories_count":14818118,"issues_count":33018764,"pull_requests_count":109002405,"authors_count":11312601,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{}},"past_year_pull_request_labels_count":{"table":{"dependencies":20,"java":16,"github_actions":4}},"past_year_issue_author_associations_count":{"table":{}},"past_year_pull_request_author_associations_count":{"table":{"CONTRIBUTOR":26}},"past_year_issue_authors":{"table":{}},"past_year_pull_request_authors":{"table":{"dependabot[bot]":20,"simonmarty":3,"vedant-jaiswal":2,"i-am-SR":1}},"maintainers":[{"table":{"login":"ThirdEyeSqueegee","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ThirdEyeSqueegee"}}],"active_maintainers":[]}},"events":{"total":{"ReleaseEvent":1,"DeleteEvent":55,"PullRequestEvent":100,"ForkEvent":3,"IssuesEvent":2,"WatchEvent":6,"IssueCommentEvent":75,"PushEvent":39,"PullRequestReviewCommentEvent":14,"PullRequestReviewEvent":50,"CreateEvent":47},"last_year":{"ReleaseEvent":1,"DeleteEvent":10,"PullRequestEvent":16,"ForkEvent":1,"WatchEvent":2,"IssueCommentEvent":17,"PushEvent":14,"PullRequestReviewCommentEvent":5,"PullRequestReviewEvent":24,"CreateEvent":12}},"keywords":["aws-secrets-manager","caching","java","secret"],"dependencies":[{"ecosystem":"maven","filepath":"pom.xml","sha":null,"kind":"manifest","created_at":"2022-07-18T18:42:26.882Z","updated_at":"2022-07-18T18:42:26.882Z","repository_link":"https://github.com/aws/aws-secretsmanager-caching-java/blob/v2/pom.xml","dependencies":[{"id":248795522,"package_name":"com.amazonaws:aws-java-sdk-secretsmanager","ecosystem":"maven","requirements":"1.12.251","direct":true,"kind":"runtime","optional":false},{"id":248795523,"package_name":"org.testng:testng","ecosystem":"maven","requirements":"7.6.1","direct":true,"kind":"test","optional":false},{"id":248795524,"package_name":"org.mockito:mockito-all","ecosystem":"maven","requirements":"1.10.19","direct":true,"kind":"test","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/codeql-analysis.yml","sha":null,"kind":"manifest","created_at":"2023-01-15T00:51:26.071Z","updated_at":"2023-01-15T00:51:26.071Z","repository_link":"https://github.com/aws/aws-secretsmanager-caching-java/blob/v2/.github/workflows/codeql-analysis.yml","dependencies":[{"id":6910366500,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6910366501,"package_name":"github/codeql-action/init","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6910366502,"package_name":"github/codeql-action/autobuild","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6910366503,"package_name":"github/codeql-action/analyze","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/maven.yml","sha":null,"kind":"manifest","created_at":"2023-01-15T00:51:26.108Z","updated_at":"2023-01-15T00:51:26.108Z","repository_link":"https://github.com/aws/aws-secretsmanager-caching-java/blob/v2/.github/workflows/maven.yml","dependencies":[{"id":6910366504,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6910366505,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6910366506,"package_name":"codecov/codecov-action","ecosystem":"actions","requirements":"v3.1.0","direct":true,"kind":"composite","optional":false}]}],"score":23.800104154508347,"created_at":"2025-10-10T05:57:36.157Z","updated_at":"2026-06-21T08:02:31.618Z","avatar_url":"https://github.com/aws.png","language":"Java","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/368037","html_url":"https://summary.ecosyste.ms/projects/368037"}