https://github.com/FasterXML/jackson-databind
hacktoberfest jackson jackson-databind json
Score: 37.68037073813136
Last synced: about 12 hours ago
JSON representation
Repository metadata:
General data-binding package for Jackson: works on streaming API (core) implementation(s)
- Host: GitHub
- URL: https://github.com/FasterXML/jackson-databind
- Owner: FasterXML
- License: apache-2.0
- Created: 2011-12-23T07:17:41.000Z (over 14 years ago)
- Default Branch: 3.x
- Last Pushed: 2026-06-01T00:15:18.000Z (20 days ago)
- Last Synced: 2026-06-01T02:09:28.943Z (20 days ago)
- Topics: hacktoberfest, jackson, jackson-databind, json
- Language: Java
- Homepage:
- Size: 84.4 MB
- Stars: 3,724
- Watchers: 161
- Forks: 1,492
- Open Issues: 115
-
Metadata Files:
- Readme: README.md
- Funding: .github/FUNDING.yml
- License: LICENSE
- Security: SECURITY.md
-
Funding:
- Tidelift: maven/com.fasterxml.jackson.core:jackson-databind
- Github: cowtowncoder
Owner metadata:
- Name: FasterXML, LLC
- Login: FasterXML
- Email: info@fasterxml.com
- Kind: organization
- Description:
- Website: http://fasterxml.com
- Location: Seattle, WA
- Twitter:
- Company:
- Icon url: https://avatars.githubusercontent.com/u/382692?v=4
- Repositories: 68
- Last Synced at: 2023-04-14T17:44:54.358Z
- Profile URL: https://github.com/FasterXML
GitHub Events
Total
- Commit comment event: 4
- Create event: 167
- Delete event: 148
- Fork event: 79
- Issue comment event: 1835
- Issues event: 532
- Pull request event: 553
- Pull request review comment event: 450
- Pull request review event: 560
- Push event: 1261
- Watch event: 128
- Total: 5717
Last Year
- Commit comment event: 4
- Create event: 167
- Delete event: 148
- Fork event: 79
- Issue comment event: 1835
- Issues event: 532
- Pull request event: 553
- Pull request review comment event: 450
- Pull request review event: 560
- Push event: 1261
- Watch event: 128
- Total: 5717
Committers metadata
Last synced: about 1 month ago
Total Commits: 8,842
Total Committers: 372
Avg Commits per committer: 23.769
Development Distribution Score (DDS): 0.148
Commits in past year: 949
Committers in past year: 41
Avg Commits per committer in past year: 23.146
Development Distribution Score (DDS) in past year: 0.176
| Name | Commits | |
|---|---|---|
| Tatu Saloranta | t****a@i****i | 7532 |
| Kim, Joo Hyuk | b****e@g****m | 238 |
| PJ Fanning | p****g | 116 |
| Tatu | t****u@n****m | 78 |
| dependabot[bot] | 4****] | 58 |
| Tatu Saloranta | t****a@s****m | 43 |
| jackphel | j****l@g****m | 27 |
| Pascal Gélinas | p****s@n****m | 26 |
| Jackson | h****5@n****m | 22 |
| Christopher Currie | c****r@c****m | 20 |
| Carter Kozak | c****k@c****t | 19 |
| Lee Jiwon | 1****9 | 17 |
| wrongwrong | k****7 | 14 |
| Francis Galiegue | f****e@g****m | 12 |
| Jonas Konrad | j****d@o****m | 11 |
| Francis Galiegue | f****e@c****m | 11 |
| Bertrand Renuart | b****t@i****u | 10 |
| Andy Boothe | a****e@g****m | 9 |
| Copilot | 1****t | 9 |
| Carsten Wickner | C****r@g****e | 9 |
| Benson Margulies | b****n@b****m | 8 |
| Hugo Wood | h****5@f****r | 8 |
| Sim Yih Tsern | s****n@y****m | 8 |
| Davyd Fridman | d****l@g****m | 8 |
| Ville Koskela | v****e@k****m | 8 |
| Martin Steiger | g****t@m****e | 7 |
| Matthew Morrissette | y****a@g****m | 6 |
| iProdigy | 8****y | 6 |
| Muhammad Khalikov | 5****2 | 6 |
| Michael Spiegel | s****l@a****m | 5 |
| and 342 more... | ||
Issue and Pull Request metadata
Last synced: about 2 months ago
Total issues: 738
Total pull requests: 1,029
Average time to close issues: over 1 year
Average time to close pull requests: about 1 month
Total issue authors: 484
Total pull request authors: 84
Average comments per issue: 4.96
Average comments per pull request: 1.81
Merged pull request: 795
Bot issues: 1
Bot pull requests: 51
Past year issues: 85
Past year pull requests: 181
Past year average time to close issues: 7 days
Past year average time to close pull requests: 6 days
Past year issue authors: 54
Past year pull request authors: 24
Past year average comments per issue: 3.85
Past year average comments per pull request: 1.73
Past year merged pull request: 117
Past year bot issues: 0
Past year bot pull requests: 7
Top Issue Authors
- cowtowncoder (133)
- pjfanning (19)
- k163377 (17)
- JooHyukKim (11)
- sdeleuze (10)
- yihtserns (7)
- odrotbohm (7)
- nlisker (6)
- garretwilson (5)
- quaff (4)
- joca-bt (4)
- hajdamak (4)
- ludgerb (3)
- Gems (3)
- cowwoc (3)
Top Pull Request Authors
- cowtowncoder (375)
- JooHyukKim (278)
- pjfanning (109)
- dependabot[bot] (51)
- k163377 (19)
- yihtserns (14)
- timo-a (8)
- giulong (7)
- hannyu (7)
- iifawzi (6)
- zhenlin (6)
- stevenschlansker (6)
- JacksonJang (5)
- digulla (4)
- sigpwned (4)
Top Issue Labels
- to-evaluate (204)
- 3.0 (71)
- has-failing-test (53)
- 2.18 (41)
- need-test-case (40)
- Record (26)
- 2.19 (26)
- 3.x (24)
- 2.17 (18)
- 2.15 (16)
- 2.20 (14)
- will-not-fix (14)
- duplicate (13)
- 3.0-release-notes (13)
- lombok (11)
- property-discovery (10)
- most-wanted (10)
- enum (10)
- pr-welcome (9)
- 2.16 (8)
- 2.21 (3)
- 3.2 (3)
- performance (3)
- polymorphic-deduction (3)
- objectid (3)
- good first issue (3)
- date-time-config (3)
- property-iPhone (3)
- 2.14 (2)
- CVE (2)
Top Pull Request Labels
- dependencies (51)
- cla-received (33)
- 2.19 (28)
- 3.0 (28)
- 2.18 (20)
- github_actions (13)
- 2.20 (12)
- 3.0-release-notes (10)
- 2.17 (8)
- 3.x (7)
- most-wanted (3)
- gen-ai (2)
- date-time-config (2)
- to-evaluate (2)
- cla-needed (2)
- 2.21 (2)
- 3.2 (2)
- Feat (1)
- 2.15 (1)
- 2.16 (1)
- 희수 (1)
- Refactor (1)
- Record (1)
Package metadata
- Total packages: 8
- Total downloads: unknown
- Total docker downloads: 16,203,456,674
- Total dependent packages: 23,585 (may contain duplicates)
- Total dependent repositories: 244,228 (may contain duplicates)
- Total versions: 273
- Total advisories: 70
repo1.maven.org: com.fasterxml.jackson.core:jackson-databind
General data-binding functionality for Jackson: works on core streaming API
- Homepage: https://github.com/FasterXML/jackson
- Documentation: https://appdoc.app/artifact/com.fasterxml.jackson.core/jackson-databind/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 2.22.0 (published 20 days ago)
- Last Synced: 2026-06-19T16:12:30.823Z (1 day ago)
- Versions: 226
- Dependent Packages: 23,566
- Dependent Repositories: 244,221
- Docker Downloads: 16,203,456,674
-
Rankings:
- Docker downloads count: 0.001%
- Dependent packages count: 0.001%
- Dependent repos count: 0.002%
- Average: 2.032%
- Forks count: 4.351%
- Stargazers count: 5.803%
-
Advisories:
- jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode
- Uncontrolled Resource Consumption in Jackson-databind
- Uncontrolled Resource Consumption in FasterXML jackson-databind
- jackson-databind vulnerable to unsafe deserialization
- Deeply nested json in jackson-databind
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- Unsafe Deserialization in jackson-databind
- Serialization gadget exploit in jackson-databind
- Serialization gadgets exploit in jackson-databind
- Serialization gadgets exploit in jackson-databind
- Code Injection in jackson-databind
- Unsafe Deserialization in jackson-databind
- XML External Entity (XXE) Injection in Jackson Databind
- Deserialization of untrusted data in jackson-databind
- Deserialization of Untrusted Data in jackson-databind
- Deserialization of untrusted data in Jackson Databind
- Deserialization of untrusted data in Jackson Databind
- Deserialization of untrusted data in Jackson Databind
- Deserialization of untrusted data in Jackson Databind
- Deserialization of Untrusted Data in jackson-databind
- Deserialization of Untrusted Data
- Improper Input Validation in jackson-databind
- jackson-databind mishandles the interaction between serialization gadgets and typing
- jackson-databind mishandles the interaction between serialization gadgets and typing
- Polymorphic deserialization of malicious object in jackson-databind
- jackson-databind mishandles the interaction between serialization gadgets and typing
- jackson-databind mishandles the interaction between serialization gadgets and typing
- Polymorphic deserialization of malicious object in jackson-databind
- jackson-databind mishandles the interaction between serialization gadgets and typing
- jackson-databind mishandles the interaction between serialization gadgets and typing
- jackson-databind mishandles the interaction between serialization gadgets and typing
- jackson-databind mishandles the interaction between serialization gadgets and typing
- jackson-databind mishandles the interaction between serialization gadgets and typing
- jackson-databind mishandles the interaction between serialization gadgets and typing
- jackson-databind mishandles the interaction between serialization gadgets and typing
- jackson-databind mishandles the interaction between serialization gadgets and typing
- Deserialization of Untrusted Data in jackson-databind
- Deserialization of Untrusted Data in jackson-databind
- jackson-databind polymorphic typing issue
- jackson-databind polymorphic typing issue
- Polymorphic Typing in FasterXML jackson-databind
- Polymorphic Typing issue in FasterXML jackson-databind
- Polymorphic Typing issue in FasterXML jackson-databind
- Deserialization of untrusted data in FasterXML jackson-databind
- Deserialization of untrusted data in FasterXML jackson-databind
- Deserialization of untrusted data in FasterXML jackson-databind
- Deserialization of Untrusted Data in jackson-databind
- Deserialization of Untrusted Data in FasterXML jackson-databind
- Information exposure in FasterXML jackson-databind
- jackson-databind Deserialization of Untrusted Data vulnerability
- Arbitrary Code Execution in jackson-databind
- XML External Entity Reference (XXE) in jackson-databind
- Server-Side Request Forgery (SSRF) in jackson-databind
- com.fasterxml.jackson.core:jackson-databind vulnerable to Deserialization of Untrusted Data
- Deserialization of Untrusted Data in jackson-databind
- Deserialization of Untrusted Data in jackson-databind due to polymorphic deserialization
- Arbitrary Code Execution in jackson-databind
- jackson-databind vulnerable to remote code execution due to incorrect deserialization and blocklist bypass
- jackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution
- FasterXML jackson-databind allows unauthenticated remote code execution
- jackson-databind is vulnerable to a deserialization flaw
repo1.maven.org: com.jwebmp.jackson.core:jackson-databind
General data-binding functionality for Jackson: works on core streaming API
- Homepage: http://github.com/FasterXML/jackson
- Status: removed
- Documentation: https://appdoc.app/artifact/com.jwebmp.jackson.core/jackson-databind/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 0.66.0.1 (published about 7 years ago)
- Last Synced: 2026-05-04T14:02:53.121Z (about 2 months ago)
- Versions: 9
- Dependent Packages: 10
- Dependent Repositories: 7
-
Rankings:
- Forks count: 4.351%
- Stargazers count: 5.803%
- Dependent packages count: 5.981%
- Average: 6.327%
- Dependent repos count: 9.173%
repo1.maven.org: com.jwebmp.jpms.jackson.core:jackson-databind
General data-binding functionality for Jackson: works on core streaming API
- Homepage: http://github.com/FasterXML/jackson
- Documentation: https://appdoc.app/artifact/com.jwebmp.jpms.jackson.core/jackson-databind/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 0.68.0.1 (published almost 7 years ago)
- Last Synced: 2026-05-02T09:18:54.606Z (about 2 months ago)
- Versions: 11
- Dependent Packages: 7
- Dependent Repositories: 0
-
Rankings:
- Forks count: 3.265%
- Stargazers count: 4.592%
- Dependent packages count: 8.051%
- Average: 11.972%
- Dependent repos count: 31.98%
repo1.maven.org: com.jwebmp.jre11.jackson.core:jackson-databind
General data-binding functionality for Jackson: works on core streaming API
- Homepage: http://github.com/FasterXML/jackson
- Documentation: https://appdoc.app/artifact/com.jwebmp.jre11.jackson.core/jackson-databind/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 0.63.0.19 (published over 7 years ago)
- Last Synced: 2026-06-05T23:46:11.433Z (15 days ago)
- Versions: 2
- Dependent Packages: 2
- Dependent Repositories: 0
-
Rankings:
- Forks count: 3.265%
- Stargazers count: 4.592%
- Average: 15.549%
- Dependent packages count: 22.361%
- Dependent repos count: 31.98%
repo1.maven.org: org.fasterxml.jackson.core:jackson-databind
General data-binding functionality for Jackson: works on core streaming API
- Homepage: https://github.com/FasterXML/jackson
- Documentation: https://appdoc.app/artifact/org.fasterxml.jackson.core/jackson-databind/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 2.20.2 (published 6 months ago)
- Last Synced: 2026-05-25T01:03:52.852Z (27 days ago)
- Versions: 2
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 30.734%
- Average: 37.336%
- Dependent packages count: 43.939%
repo1.maven.org: tools.jackson.core:jackson-databind
General data-binding functionality for Jackson: works on core streaming API
- Homepage: https://github.com/FasterXML/jackson
- Documentation: https://appdoc.app/artifact/tools.jackson.core/jackson-databind/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 3.1.3 (published about 2 months ago)
- Last Synced: 2026-06-03T04:02:01.311Z (18 days ago)
- Versions: 20
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 34.658%
- Average: 42.106%
- Dependent packages count: 49.555%
gentoo-portage: dev-java/jackson-databind
General data-binding functionality for Jackson: works on core streaming API
- Homepage: https://github.com/FasterXML/jackson-databind
- Documentation: https://packages.gentoo.org/packages/dev-java/jackson-databind
- Licenses: Apache-2.0
- Latest release: 2.20.0 (published 5 months ago)
- Last Synced: 2026-05-27T01:31:11.473Z (25 days ago)
- Versions: 2
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
guix: java-fasterxml-jackson-databind
Data-binding functionality and tree-model for the Jackson Data Processor
- Homepage: https://github.com/FasterXML/jackson-databind
- Documentation: https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/java.scm#n10367
- Licenses: asl2.0
- Latest release: 2.9.4 (published 4 months ago)
- Last Synced: 2026-04-27T17:48:50.974Z (about 2 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
Dependencies
- actions/upload-artifact v3 composite
- google/oss-fuzz/infra/cifuzz/actions/build_fuzzers master composite
- google/oss-fuzz/infra/cifuzz/actions/run_fuzzers master composite
- actions/checkout v3.3.0 composite
- github/codeql-action/analyze v2 composite
- github/codeql-action/autobuild v2 composite
- github/codeql-action/init v2 composite
- actions/checkout v3.3.0 composite
- actions/setup-java v3 composite
- codecov/codecov-action v3 composite
- org.junit:junit-bom 5.9.2 import
- com.fasterxml.jackson.core:jackson-annotations ${jackson.version.annotations}
- com.fasterxml.jackson.core:jackson-core ${jackson.version.core}
- com.google.guava:guava-testlib 31.1-jre test
- javax.measure:jsr-275 0.9.1 test
- org.junit.jupiter:junit-jupiter test
- org.junit.vintage:junit-vintage-engine test
- org.openjdk.jol:jol-core 0.16 test
- org.powermock:powermock-api-mockito2 2.0.9 test
- org.powermock:powermock-core 2.0.9 test
- org.powermock:powermock-module-junit4 2.0.9 test
- actions/checkout 0ad4b8fadaa221de15dcec353f45205ec38ea70b composite
- actions/setup-java 99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 composite
- peter-evans/repository-dispatch v3 composite