https://github.com/FasterXML/jackson-databind
hacktoberfest jackson jackson-databind json
Score: 37.50250277730845
Last synced: about 7 hours ago
JSON representation
Repository metadata:
General data-binding package for Jackson (2.x): works on streaming API (core) implementation(s)
- Host: GitHub
- URL: https://github.com/FasterXML/jackson-databind
- Owner: FasterXML
- License: apache-2.0
- Created: 2011-12-23T07:17:41.000Z (over 13 years ago)
- Default Branch: 2.x
- Last Pushed: 2025-09-03T03:44:24.000Z (4 days ago)
- Last Synced: 2025-09-04T09:46:13.395Z (2 days ago)
- Topics: hacktoberfest, jackson, jackson-databind, json
- Language: Java
- Homepage:
- Size: 79.2 MB
- Stars: 3,614
- Watchers: 168
- Forks: 1,438
- Open Issues: 384
-
Metadata Files:
- Readme: README.md
- Funding: .github/FUNDING.yml
- License: LICENSE
- Security: SECURITY.md
-
Funding:
- Tidelift: maven/com.fasterxml.jackson.core:jackson-databind
- Github: cowtowncoder
Owner metadata:
- Name: FasterXML, LLC
- Login: FasterXML
- Email: info@fasterxml.com
- Kind: organization
- Description:
- Website: http://fasterxml.com
- Location: Seattle, WA
- Twitter:
- Company:
- Icon url: https://avatars.githubusercontent.com/u/382692?v=4
- Repositories: 68
- Last Synced at: 2023-04-14T17:44:54.358Z
- Profile URL: https://github.com/FasterXML
GitHub Events
Total
- Commit comment event: 4
- Create event: 155
- Delete event: 142
- Fork event: 74
- Issue comment event: 1734
- Issues event: 505
- Pull request event: 522
- Pull request review comment event: 425
- Pull request review event: 536
- Push event: 1193
- Watch event: 114
- Total: 5404
Last Year
- Commit comment event: 4
- Create event: 156
- Delete event: 142
- Fork event: 75
- Issue comment event: 1739
- Issues event: 509
- Pull request event: 523
- Pull request review comment event: 425
- Pull request review event: 537
- Push event: 1196
- Watch event: 114
- Total: 5420
Committers metadata
Last synced: 2 months ago
Total Commits: 6,832
Total Committers: 299
Avg Commits per committer: 22.849
Development Distribution Score (DDS): 0.151
Commits in past year: 428
Committers in past year: 32
Avg Commits per committer in past year: 13.375
Development Distribution Score (DDS) in past year: 0.273
Name | Commits | |
---|---|---|
Tatu Saloranta | t****a@i****i | 5803 |
Kim, Joo Hyuk | b****e@g****m | 187 |
PJ Fanning | p****g | 85 |
Tatu | t****u@n****m | 78 |
dependabot[bot] | 4****] | 47 |
Tatu Saloranta | t****a@s****m | 43 |
jackphel | j****l@g****m | 27 |
Pascal Gélinas | p****s@n****m | 26 |
Christopher Currie | c****r@c****m | 20 |
Carter Kozak | c****k@c****t | 18 |
Francis Galiegue | f****e@g****m | 12 |
Francis Galiegue | f****e@c****m | 11 |
wrongwrong | k****7 | 11 |
Bertrand Renuart | b****t@i****u | 10 |
Jonas Konrad | j****d@o****m | 10 |
Carsten Wickner | C****r@g****e | 9 |
Benson Margulies | b****n@b****m | 8 |
Hugo Wood | h****5@f****r | 8 |
Sim Yih Tsern | s****n@y****m | 8 |
Martin Steiger | g****t@m****e | 7 |
Matthew Morrissette | y****a@g****m | 6 |
iProdigy | 8****y | 6 |
Muhammad Khalikov | 5****2 | 6 |
Marco Catania | m****a@h****m | 5 |
Michael Spiegel | s****l@a****m | 5 |
Kamil Benedykcinski | k****i@a****l | 4 |
Michael Hixson | m****n@t****m | 4 |
Jacek Jackowiak | j****6@g****m | 4 |
FelixVaughan01 | 1****1 | 4 |
Ben Gertzfield | b****g@f****m | 4 |
and 269 more... |
Issue and Pull Request metadata
Last synced: 3 days ago
Total issues: 708
Total pull requests: 971
Average time to close issues: over 1 year
Average time to close pull requests: about 1 month
Total issue authors: 469
Total pull request authors: 72
Average comments per issue: 4.76
Average comments per pull request: 1.71
Merged pull request: 773
Bot issues: 1
Bot pull requests: 50
Past year issues: 241
Past year pull requests: 589
Past year average time to close issues: 8 days
Past year average time to close pull requests: 3 days
Past year issue authors: 140
Past year pull request authors: 39
Past year average comments per issue: 2.99
Past year average comments per pull request: 1.35
Past year merged pull request: 490
Past year bot issues: 0
Past year bot pull requests: 23
Top Issue Authors
- cowtowncoder (127)
- pjfanning (18)
- k163377 (16)
- sdeleuze (9)
- JooHyukKim (9)
- yihtserns (7)
- odrotbohm (7)
- nlisker (6)
- garretwilson (5)
- joca-bt (4)
- hajdamak (4)
- cowwoc (3)
- blacelle (3)
- quaff (3)
- ludgerb (3)
Top Pull Request Authors
- cowtowncoder (360)
- JooHyukKim (261)
- pjfanning (108)
- dependabot[bot] (50)
- k163377 (18)
- yihtserns (14)
- timo-a (8)
- hannyu (7)
- giulong (7)
- iifawzi (6)
- zhenlin (6)
- stevenschlansker (6)
- digulla (4)
- ggrebert (4)
- sigpwned (4)
Top Issue Labels
- to-evaluate (203)
- 3.0 (59)
- has-failing-test (51)
- 2.18 (41)
- need-test-case (39)
- 2.19 (28)
- Record (26)
- 3.x (20)
- 2.17 (19)
- 2.15 (16)
- duplicate (13)
- will-not-fix (12)
- lombok (11)
- 2.20 (11)
- property-discovery (10)
- most-wanted (10)
- 3.0-release-notes (10)
- enum (9)
- 2.16 (8)
- pr-welcome (7)
- property-iPhone (3)
- good first issue (3)
- polymorphic-deduction (3)
- performance (3)
- date-time-config (3)
- documentation (2)
- CVE (2)
- 2.14 (2)
- dependencies (1)
- node-config (1)
Top Pull Request Labels
- dependencies (50)
- cla-received (30)
- 2.19 (28)
- 3.0 (27)
- 2.18 (20)
- 2.20 (12)
- github_actions (11)
- 3.0-release-notes (10)
- 2.17 (8)
- 3.x (7)
- most-wanted (3)
- to-evaluate (2)
- date-time-config (2)
- cla-needed (2)
- Record (1)
- 2.16 (1)
- 2.15 (1)
Package metadata
- Total packages: 5
- Total downloads: unknown
- Total docker downloads: 16,203,456,674
- Total dependent packages: 23,585 (may contain duplicates)
- Total dependent repositories: 244,228 (may contain duplicates)
- Total versions: 242
- Total advisories: 70
repo1.maven.org: com.fasterxml.jackson.core:jackson-databind
General data-binding functionality for Jackson: works on core streaming API
- Homepage: https://github.com/FasterXML/jackson
- Documentation: https://appdoc.app/artifact/com.fasterxml.jackson.core/jackson-databind/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 2.20.0 (published 9 days ago)
- Last Synced: 2025-09-05T10:02:56.196Z (1 day ago)
- Versions: 212
- Dependent Packages: 23,566
- Dependent Repositories: 244,221
- Docker Downloads: 16,203,456,674
-
Rankings:
- Docker downloads count: 0.001%
- Dependent packages count: 0.001%
- Dependent repos count: 0.002%
- Average: 2.032%
- Forks count: 4.351%
- Stargazers count: 5.803%
-
Advisories:
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- jackson-databind mishandles the interaction between serialization gadgets and typing
- Polymorphic deserialization of malicious object in jackson-databind
- jackson-databind Deserialization of Untrusted Data vulnerability
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- jackson-databind mishandles the interaction between serialization gadgets and typing
- jackson-databind vulnerable to unsafe deserialization
- Deserialization of untrusted data in jackson-databind
- jackson-databind mishandles the interaction between serialization gadgets and typing
- jackson-databind polymorphic typing issue
- Unsafe Deserialization in jackson-databind
- Deserialization of untrusted data in Jackson Databind
- Deserialization of untrusted data in FasterXML jackson-databind
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- Deserialization of Untrusted Data in jackson-databind
- Arbitrary Code Execution in jackson-databind
- Polymorphic Typing in FasterXML jackson-databind
- Polymorphic Typing issue in FasterXML jackson-databind
- XML External Entity Reference (XXE) in jackson-databind
- jackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution
- jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode
- Deserialization of Untrusted Data in jackson-databind
- jackson-databind mishandles the interaction between serialization gadgets and typing
- jackson-databind mishandles the interaction between serialization gadgets and typing
- Code Injection in jackson-databind
- jackson-databind is vulnerable to a deserialization flaw
- Deserialization of untrusted data in Jackson Databind
- Information exposure in FasterXML jackson-databind
- jackson-databind polymorphic typing issue
- jackson-databind mishandles the interaction between serialization gadgets and typing
- Deserialization of Untrusted Data in FasterXML jackson-databind
- Serialization gadgets exploit in jackson-databind
- Polymorphic deserialization of malicious object in jackson-databind
- Deserialization of Untrusted Data in jackson-databind
- Deserialization of Untrusted Data in jackson-databind
- jackson-databind mishandles the interaction between serialization gadgets and typing
- Unsafe Deserialization in jackson-databind
- XML External Entity (XXE) Injection in Jackson Databind
- Deserialization of Untrusted Data
- jackson-databind mishandles the interaction between serialization gadgets and typing
- jackson-databind mishandles the interaction between serialization gadgets and typing
- Deserialization of Untrusted Data in jackson-databind due to polymorphic deserialization
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- Deserialization of Untrusted Data in jackson-databind
- Serialization gadget exploit in jackson-databind
- Arbitrary Code Execution in jackson-databind
- Deserialization of untrusted data in FasterXML jackson-databind
- Deserialization of untrusted data in Jackson Databind
- FasterXML jackson-databind allows unauthenticated remote code execution
- jackson-databind vulnerable to remote code execution due to incorrect deserialization and blocklist bypass
- Improper Input Validation in jackson-databind
- jackson-databind mishandles the interaction between serialization gadgets and typing
- Uncontrolled Resource Consumption in Jackson-databind
- Polymorphic Typing issue in FasterXML jackson-databind
- Deserialization of untrusted data in Jackson Databind
- Deserialization of Untrusted Data in jackson-databind
- Server-Side Request Forgery (SSRF) in jackson-databind
- jackson-databind mishandles the interaction between serialization gadgets and typing
- com.fasterxml.jackson.core:jackson-databind vulnerable to Deserialization of Untrusted Data
- Serialization gadgets exploit in jackson-databind
- Uncontrolled Resource Consumption in FasterXML jackson-databind
- jackson-databind mishandles the interaction between serialization gadgets and typing
- Deeply nested json in jackson-databind
- Deserialization of untrusted data in FasterXML jackson-databind
repo1.maven.org: com.jwebmp.jackson.core:jackson-databind
General data-binding functionality for Jackson: works on core streaming API
- Homepage: http://github.com/FasterXML/jackson
- Documentation: https://appdoc.app/artifact/com.jwebmp.jackson.core/jackson-databind/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 0.66.0.1 (published over 6 years ago)
- Last Synced: 2025-09-05T10:03:03.401Z (1 day ago)
- Versions: 9
- Dependent Packages: 10
- Dependent Repositories: 7
-
Rankings:
- Forks count: 4.351%
- Stargazers count: 5.803%
- Dependent packages count: 5.981%
- Average: 6.327%
- Dependent repos count: 9.173%
repo1.maven.org: com.jwebmp.jpms.jackson.core:jackson-databind
General data-binding functionality for Jackson: works on core streaming API
- Homepage: http://github.com/FasterXML/jackson
- Documentation: https://appdoc.app/artifact/com.jwebmp.jpms.jackson.core/jackson-databind/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 0.68.0.1 (published about 6 years ago)
- Last Synced: 2025-09-05T10:03:00.348Z (1 day ago)
- Versions: 11
- Dependent Packages: 7
- Dependent Repositories: 0
-
Rankings:
- Forks count: 3.265%
- Stargazers count: 4.592%
- Dependent packages count: 8.051%
- Average: 11.972%
- Dependent repos count: 31.98%
repo1.maven.org: com.jwebmp.jre11.jackson.core:jackson-databind
General data-binding functionality for Jackson: works on core streaming API
- Homepage: http://github.com/FasterXML/jackson
- Documentation: https://appdoc.app/artifact/com.jwebmp.jre11.jackson.core/jackson-databind/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 0.63.0.19 (published over 6 years ago)
- Last Synced: 2025-09-05T10:02:52.690Z (1 day ago)
- Versions: 2
- Dependent Packages: 2
- Dependent Repositories: 0
-
Rankings:
- Forks count: 3.265%
- Stargazers count: 4.592%
- Average: 15.549%
- Dependent packages count: 22.361%
- Dependent repos count: 31.98%
repo1.maven.org: tools.jackson.core:jackson-databind
General data-binding functionality for Jackson: works on core streaming API
- Homepage: https://github.com/FasterXML/jackson
- Documentation: https://appdoc.app/artifact/tools.jackson.core/jackson-databind/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 3.0.0-rc8 (published 24 days ago)
- Last Synced: 2025-09-05T10:02:50.238Z (1 day ago)
- Versions: 8
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 34.658%
- Average: 42.106%
- Dependent packages count: 49.555%
Dependencies
- actions/upload-artifact v3 composite
- google/oss-fuzz/infra/cifuzz/actions/build_fuzzers master composite
- google/oss-fuzz/infra/cifuzz/actions/run_fuzzers master composite
- actions/checkout v3.3.0 composite
- github/codeql-action/analyze v2 composite
- github/codeql-action/autobuild v2 composite
- github/codeql-action/init v2 composite
- actions/checkout v3.3.0 composite
- actions/setup-java v3 composite
- codecov/codecov-action v3 composite
- org.junit:junit-bom 5.9.2 import
- com.fasterxml.jackson.core:jackson-annotations ${jackson.version.annotations}
- com.fasterxml.jackson.core:jackson-core ${jackson.version.core}
- com.google.guava:guava-testlib 31.1-jre test
- javax.measure:jsr-275 0.9.1 test
- org.junit.jupiter:junit-jupiter test
- org.junit.vintage:junit-vintage-engine test
- org.openjdk.jol:jol-core 0.16 test
- org.powermock:powermock-api-mockito2 2.0.9 test
- org.powermock:powermock-core 2.0.9 test
- org.powermock:powermock-module-junit4 2.0.9 test
- actions/checkout 0ad4b8fadaa221de15dcec353f45205ec38ea70b composite
- actions/setup-java 99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 composite
- peter-evans/repository-dispatch v3 composite