https://github.com/FasterXML/jackson-databind
hacktoberfest jackson jackson-databind json
Score: 37.683648026845695
Last synced: about 18 hours ago
JSON representation
Repository metadata:
General data-binding package for Jackson: works on streaming API (core) implementation(s)
- Host: GitHub
- URL: https://github.com/FasterXML/jackson-databind
- Owner: FasterXML
- License: apache-2.0
- Created: 2011-12-23T07:17:41.000Z (about 14 years ago)
- Default Branch: 3.x
- Last Pushed: 2026-02-03T06:44:45.000Z (4 days ago)
- Last Synced: 2026-02-03T09:27:30.367Z (4 days ago)
- Topics: hacktoberfest, jackson, jackson-databind, json
- Language: Java
- Homepage:
- Size: 81.1 MB
- Stars: 3,675
- Watchers: 164
- Forks: 1,460
- Open Issues: 283
-
Metadata Files:
- Readme: README.md
- Funding: .github/FUNDING.yml
- License: LICENSE
- Security: SECURITY.md
-
Funding:
- Tidelift: maven/com.fasterxml.jackson.core:jackson-databind
- Github: cowtowncoder
Owner metadata:
- Name: FasterXML, LLC
- Login: FasterXML
- Email: info@fasterxml.com
- Kind: organization
- Description:
- Website: http://fasterxml.com
- Location: Seattle, WA
- Twitter:
- Company:
- Icon url: https://avatars.githubusercontent.com/u/382692?v=4
- Repositories: 68
- Last Synced at: 2023-04-14T17:44:54.358Z
- Profile URL: https://github.com/FasterXML
GitHub Events
Total
- Commit comment event: 4
- Create event: 167
- Delete event: 148
- Fork event: 79
- Issue comment event: 1835
- Issues event: 532
- Pull request event: 553
- Pull request review comment event: 450
- Pull request review event: 560
- Push event: 1261
- Watch event: 128
- Total: 5717
Last Year
- Commit comment event: 4
- Create event: 167
- Delete event: 148
- Fork event: 79
- Issue comment event: 1835
- Issues event: 532
- Pull request event: 553
- Pull request review comment event: 450
- Pull request review event: 560
- Push event: 1261
- Watch event: 128
- Total: 5717
Committers metadata
Last synced: 2 days ago
Total Commits: 8,470
Total Committers: 362
Avg Commits per committer: 23.398
Development Distribution Score (DDS): 0.149
Commits in past year: 854
Committers in past year: 45
Avg Commits per committer in past year: 18.978
Development Distribution Score (DDS) in past year: 0.214
| Name | Commits | |
|---|---|---|
| Tatu Saloranta | t****a@i****i | 7205 |
| Kim, Joo Hyuk | b****e@g****m | 236 |
| PJ Fanning | p****g | 111 |
| Tatu | t****u@n****m | 78 |
| dependabot[bot] | 4****] | 55 |
| Tatu Saloranta | t****a@s****m | 43 |
| jackphel | j****l@g****m | 27 |
| Pascal Gélinas | p****s@n****m | 26 |
| Jackson | h****5@n****m | 21 |
| Christopher Currie | c****r@c****m | 20 |
| Carter Kozak | c****k@c****t | 19 |
| wrongwrong | k****7 | 13 |
| Francis Galiegue | f****e@g****m | 12 |
| Francis Galiegue | f****e@c****m | 11 |
| Jonas Konrad | j****d@o****m | 10 |
| Bertrand Renuart | b****t@i****u | 10 |
| Carsten Wickner | C****r@g****e | 9 |
| Andy Boothe | a****e@g****m | 9 |
| Sim Yih Tsern | s****n@y****m | 8 |
| Hugo Wood | h****5@f****r | 8 |
| Benson Margulies | b****n@b****m | 8 |
| Davyd Fridman | d****l@g****m | 8 |
| Ville Koskela | v****e@k****m | 8 |
| Martin Steiger | g****t@m****e | 7 |
| Muhammad Khalikov | 5****2 | 6 |
| iProdigy | 8****y | 6 |
| Matthew Morrissette | y****a@g****m | 6 |
| Michael Spiegel | s****l@a****m | 5 |
| Marco Catania | m****a@h****m | 5 |
| Stephan Schroevers | s****s@t****m | 4 |
| and 332 more... | ||
Issue and Pull Request metadata
Last synced: 6 days ago
Total issues: 730
Total pull requests: 1,020
Average time to close issues: over 1 year
Average time to close pull requests: about 1 month
Total issue authors: 480
Total pull request authors: 80
Average comments per issue: 4.95
Average comments per pull request: 1.76
Merged pull request: 792
Bot issues: 1
Bot pull requests: 51
Past year issues: 157
Past year pull requests: 363
Past year average time to close issues: 8 days
Past year average time to close pull requests: 5 days
Past year issue authors: 78
Past year pull request authors: 33
Past year average comments per issue: 3.29
Past year average comments per pull request: 1.39
Past year merged pull request: 264
Past year bot issues: 0
Past year bot pull requests: 13
Top Issue Authors
- cowtowncoder (131)
- pjfanning (19)
- k163377 (17)
- JooHyukKim (11)
- sdeleuze (10)
- yihtserns (7)
- odrotbohm (7)
- nlisker (6)
- garretwilson (5)
- hajdamak (4)
- joca-bt (4)
- ludgerb (3)
- cowwoc (3)
- quaff (3)
- Gems (3)
Top Pull Request Authors
- cowtowncoder (372)
- JooHyukKim (278)
- pjfanning (109)
- dependabot[bot] (51)
- k163377 (19)
- yihtserns (14)
- timo-a (8)
- hannyu (7)
- giulong (7)
- iifawzi (6)
- zhenlin (6)
- stevenschlansker (6)
- JacksonJang (5)
- badoken (4)
- lbenedetto (4)
Top Issue Labels
- to-evaluate (203)
- 3.0 (71)
- has-failing-test (53)
- 2.18 (41)
- need-test-case (40)
- 2.19 (26)
- Record (26)
- 3.x (24)
- 2.17 (18)
- 2.15 (16)
- 2.20 (14)
- 3.0-release-notes (13)
- duplicate (13)
- will-not-fix (12)
- lombok (11)
- enum (10)
- most-wanted (10)
- property-discovery (10)
- pr-welcome (9)
- 2.16 (8)
- polymorphic-deduction (3)
- property-iPhone (3)
- performance (3)
- date-time-config (3)
- good first issue (3)
- CVE (2)
- documentation (2)
- 2.14 (2)
- 2.21 (2)
- coercion-config (1)
Top Pull Request Labels
- dependencies (51)
- cla-received (31)
- 3.0 (28)
- 2.19 (28)
- 2.18 (20)
- github_actions (13)
- 2.20 (12)
- 3.0-release-notes (10)
- 2.17 (8)
- 3.x (7)
- most-wanted (3)
- to-evaluate (2)
- 2.21 (2)
- date-time-config (2)
- cla-needed (2)
- Record (1)
- gen-ai (1)
- 2.16 (1)
- 2.15 (1)
Package metadata
- Total packages: 6
- Total downloads: unknown
- Total docker downloads: 16,203,456,674
- Total dependent packages: 23,585 (may contain duplicates)
- Total dependent repositories: 244,228 (may contain duplicates)
- Total versions: 257
- Total advisories: 70
repo1.maven.org: com.fasterxml.jackson.core:jackson-databind
General data-binding functionality for Jackson: works on core streaming API
- Homepage: https://github.com/FasterXML/jackson
- Documentation: https://appdoc.app/artifact/com.fasterxml.jackson.core/jackson-databind/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 2.21.0 (published 19 days ago)
- Last Synced: 2026-02-04T13:38:00.389Z (3 days ago)
- Versions: 218
- Dependent Packages: 23,566
- Dependent Repositories: 244,221
- Docker Downloads: 16,203,456,674
-
Rankings:
- Docker downloads count: 0.001%
- Dependent packages count: 0.001%
- Dependent repos count: 0.002%
- Average: 2.032%
- Forks count: 4.351%
- Stargazers count: 5.803%
-
Advisories:
- jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode
- Uncontrolled Resource Consumption in Jackson-databind
- Uncontrolled Resource Consumption in FasterXML jackson-databind
- jackson-databind vulnerable to unsafe deserialization
- Deeply nested json in jackson-databind
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- Serialization gadget exploit in jackson-databind
- Serialization gadgets exploit in jackson-databind
- Serialization gadgets exploit in jackson-databind
- Code Injection in jackson-databind
- Unsafe Deserialization in jackson-databind
- XML External Entity (XXE) Injection in Jackson Databind
- Deserialization of untrusted data in jackson-databind
- Deserialization of Untrusted Data in jackson-databind
- Deserialization of untrusted data in Jackson Databind
- Deserialization of untrusted data in Jackson Databind
- Deserialization of untrusted data in Jackson Databind
- Deserialization of untrusted data in Jackson Databind
- Deserialization of Untrusted Data in jackson-databind
- Deserialization of Untrusted Data
- Improper Input Validation in jackson-databind
- jackson-databind mishandles the interaction between serialization gadgets and typing
- jackson-databind mishandles the interaction between serialization gadgets and typing
- Polymorphic deserialization of malicious object in jackson-databind
- jackson-databind mishandles the interaction between serialization gadgets and typing
- jackson-databind mishandles the interaction between serialization gadgets and typing
- Polymorphic deserialization of malicious object in jackson-databind
- jackson-databind mishandles the interaction between serialization gadgets and typing
- jackson-databind mishandles the interaction between serialization gadgets and typing
- jackson-databind mishandles the interaction between serialization gadgets and typing
- jackson-databind mishandles the interaction between serialization gadgets and typing
- jackson-databind mishandles the interaction between serialization gadgets and typing
- jackson-databind mishandles the interaction between serialization gadgets and typing
- jackson-databind mishandles the interaction between serialization gadgets and typing
- jackson-databind mishandles the interaction between serialization gadgets and typing
- Deserialization of Untrusted Data in jackson-databind
- Deserialization of Untrusted Data in jackson-databind
- jackson-databind polymorphic typing issue
- jackson-databind polymorphic typing issue
- Polymorphic Typing in FasterXML jackson-databind
- Polymorphic Typing issue in FasterXML jackson-databind
- Polymorphic Typing issue in FasterXML jackson-databind
- Deserialization of untrusted data in FasterXML jackson-databind
- Deserialization of untrusted data in FasterXML jackson-databind
- Deserialization of untrusted data in FasterXML jackson-databind
- Deserialization of Untrusted Data in jackson-databind
- Deserialization of Untrusted Data in FasterXML jackson-databind
- Information exposure in FasterXML jackson-databind
- jackson-databind Deserialization of Untrusted Data vulnerability
- Arbitrary Code Execution in jackson-databind
- XML External Entity Reference (XXE) in jackson-databind
- Server-Side Request Forgery (SSRF) in jackson-databind
- com.fasterxml.jackson.core:jackson-databind vulnerable to Deserialization of Untrusted Data
- Deserialization of Untrusted Data in jackson-databind
- Deserialization of Untrusted Data in jackson-databind due to polymorphic deserialization
- Arbitrary Code Execution in jackson-databind
- jackson-databind vulnerable to remote code execution due to incorrect deserialization and blocklist bypass
- jackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution
- FasterXML jackson-databind allows unauthenticated remote code execution
- jackson-databind is vulnerable to a deserialization flaw
repo1.maven.org: com.jwebmp.jackson.core:jackson-databind
General data-binding functionality for Jackson: works on core streaming API
- Homepage: http://github.com/FasterXML/jackson
- Documentation: https://appdoc.app/artifact/com.jwebmp.jackson.core/jackson-databind/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 0.66.0.1 (published almost 7 years ago)
- Last Synced: 2026-01-27T04:41:05.393Z (11 days ago)
- Versions: 9
- Dependent Packages: 10
- Dependent Repositories: 7
-
Rankings:
- Forks count: 4.351%
- Stargazers count: 5.803%
- Dependent packages count: 5.981%
- Average: 6.327%
- Dependent repos count: 9.173%
repo1.maven.org: com.jwebmp.jpms.jackson.core:jackson-databind
General data-binding functionality for Jackson: works on core streaming API
- Homepage: http://github.com/FasterXML/jackson
- Documentation: https://appdoc.app/artifact/com.jwebmp.jpms.jackson.core/jackson-databind/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 0.68.0.1 (published over 6 years ago)
- Last Synced: 2026-01-27T04:40:26.533Z (11 days ago)
- Versions: 11
- Dependent Packages: 7
- Dependent Repositories: 0
-
Rankings:
- Forks count: 3.265%
- Stargazers count: 4.592%
- Dependent packages count: 8.051%
- Average: 11.972%
- Dependent repos count: 31.98%
repo1.maven.org: com.jwebmp.jre11.jackson.core:jackson-databind
General data-binding functionality for Jackson: works on core streaming API
- Homepage: http://github.com/FasterXML/jackson
- Documentation: https://appdoc.app/artifact/com.jwebmp.jre11.jackson.core/jackson-databind/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 0.63.0.19 (published about 7 years ago)
- Last Synced: 2026-01-27T04:39:20.869Z (11 days ago)
- Versions: 2
- Dependent Packages: 2
- Dependent Repositories: 0
-
Rankings:
- Forks count: 3.265%
- Stargazers count: 4.592%
- Average: 15.549%
- Dependent packages count: 22.361%
- Dependent repos count: 31.98%
repo1.maven.org: org.fasterxml.jackson.core:jackson-databind
General data-binding functionality for Jackson: works on core streaming API
- Homepage: https://github.com/FasterXML/jackson
- Documentation: https://appdoc.app/artifact/org.fasterxml.jackson.core/jackson-databind/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 2.20.2 (published about 1 month ago)
- Last Synced: 2025-12-25T08:16:41.846Z (about 1 month ago)
- Versions: 2
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 30.734%
- Average: 37.336%
- Dependent packages count: 43.939%
repo1.maven.org: tools.jackson.core:jackson-databind
General data-binding functionality for Jackson: works on core streaming API
- Homepage: https://github.com/FasterXML/jackson
- Documentation: https://appdoc.app/artifact/tools.jackson.core/jackson-databind/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 3.0.4 (published 16 days ago)
- Last Synced: 2026-01-27T04:43:45.039Z (11 days ago)
- Versions: 15
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 34.658%
- Average: 42.106%
- Dependent packages count: 49.555%
Dependencies
- actions/upload-artifact v3 composite
- google/oss-fuzz/infra/cifuzz/actions/build_fuzzers master composite
- google/oss-fuzz/infra/cifuzz/actions/run_fuzzers master composite
- actions/checkout v3.3.0 composite
- github/codeql-action/analyze v2 composite
- github/codeql-action/autobuild v2 composite
- github/codeql-action/init v2 composite
- actions/checkout v3.3.0 composite
- actions/setup-java v3 composite
- codecov/codecov-action v3 composite
- org.junit:junit-bom 5.9.2 import
- com.fasterxml.jackson.core:jackson-annotations ${jackson.version.annotations}
- com.fasterxml.jackson.core:jackson-core ${jackson.version.core}
- com.google.guava:guava-testlib 31.1-jre test
- javax.measure:jsr-275 0.9.1 test
- org.junit.jupiter:junit-jupiter test
- org.junit.vintage:junit-vintage-engine test
- org.openjdk.jol:jol-core 0.16 test
- org.powermock:powermock-api-mockito2 2.0.9 test
- org.powermock:powermock-core 2.0.9 test
- org.powermock:powermock-module-junit4 2.0.9 test
- actions/checkout 0ad4b8fadaa221de15dcec353f45205ec38ea70b composite
- actions/setup-java 99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 composite
- peter-evans/repository-dispatch v3 composite