https://github.com/spring-projects/spring-security
framework java security spring spring-framework
Score: 39.93857607836921
Last synced: about 8 hours ago
JSON representation
Repository metadata:
Spring Security
- Host: GitHub
- URL: https://github.com/spring-projects/spring-security
- Owner: spring-projects
- License: apache-2.0
- Created: 2012-01-10T21:50:57.000Z (over 14 years ago)
- Default Branch: main
- Last Pushed: 2026-08-21T15:15:04.000Z (2 days ago)
- Last Synced: 2026-08-22T16:40:53.557Z (1 day ago)
- Topics: framework, java, security, spring, spring-framework
- Language: Java
- Homepage: http://spring.io/projects/spring-security
- Size: 90.4 MB
- Stars: 9,608
- Watchers: 410
- Forks: 6,326
- Open Issues: 1,450
-
Metadata Files:
- Readme: README.adoc
- Contributing: CONTRIBUTING.adoc
- License: LICENSE.txt
- Notice: notice.txt
Owner metadata:
- Name: Spring
- Login: spring-projects
- Email:
- Kind: organization
- Description: Spring Projects
- Website: https://spring.io/projects
- Location: United States of America
- Twitter: springcentral
- Company:
- Icon url: https://avatars.githubusercontent.com/u/317776?v=4
- Repositories: 78
- Last Synced at: 2026-08-22T00:54:17.404Z
- Profile URL: https://github.com/spring-projects
GitHub Events
Total
- Commit comment event: 3
- Create event: 869
- Delete event: 756
- Fork event: 391
- Gollum event: 8
- Issue comment event: 2406
- Issues event: 1762
- Pull request event: 2621
- Pull request review comment event: 617
- Pull request review event: 597
- Push event: 1870
- Release event: 30
- Watch event: 633
- Total: 12563
Last Year
- Commit comment event: 1
- Create event: 441
- Delete event: 381
- Fork event: 112
- Issue comment event: 559
- Issues event: 755
- Pull request event: 1227
- Pull request review comment event: 161
- Pull request review event: 144
- Push event: 671
- Release event: 8
- Watch event: 186
- Total: 4646
Committers metadata
Last synced: 5 days ago
Total Commits: 17,929
Total Committers: 1,037
Avg Commits per committer: 17.289
Development Distribution Score (DDS): 0.843
Commits in past year: 1,372
Committers in past year: 101
Avg Commits per committer in past year: 13.584
Development Distribution Score (DDS) in past year: 0.622
| Name | Commits | |
|---|---|---|
| Luke Taylor | l****r@s****m | 2822 |
| Rob Winch | r****h | 2724 |
| Josh Cummings | j****s@g****m | 2216 |
| dependabot[bot] | 4****] | 1831 |
| Ben Alex | b****x@s****m | 1101 |
| Marcus Da Coregio | m****o@g****m | 853 |
| Joe Grandja | j****a@p****o | 839 |
| Steve Riesenberg | s****g@v****m | 752 |
| Eleftheria Stein | e****a@g****m | 602 |
| Rob Winch | r****h@g****m | 527 |
| github-actions[bot] | g****] | 325 |
| Carlos Sanchez | c****g@u****t | 200 |
| Tran Ngoc Nhan | n****6@g****m | 129 |
| Phillip Webb | p****b@v****m | 77 |
| Vishal Puri | v****i@s****m | 76 |
| Ray Krueger | r****r@u****t | 69 |
| Lars Grefer | g****b@l****e | 63 |
| Filip Hanik | f****k@p****o | 62 |
| Evgeniy Cheban | m****n@g****m | 60 |
| Daniel Garnier-Moiroux | g****t@g****f | 56 |
| Max Batischev | m****r@m****u | 50 |
| Johnny Lim | i****e@n****m | 46 |
| DingHao | d****n@g****m | 43 |
| Scott McCrory | s****y@u****t | 39 |
| Scott Battaglia | s****a@r****u | 38 |
| Andrey Litvitski | a****8@g****m | 35 |
| Robert Sanders | r****s@u****t | 35 |
| Eddú Meléndez | e****z@g****m | 33 |
| Spring Buildmaster | b****r@s****g | 30 |
| Vedran Pavic | v****c@g****m | 23 |
| and 1007 more... | ||
Issue and Pull Request metadata
Last synced: about 8 hours ago
Total issues: 1,912
Total pull requests: 3,120
Average time to close issues: 4 months
Average time to close pull requests: 12 days
Total issue authors: 805
Total pull request authors: 374
Average comments per issue: 1.72
Average comments per pull request: 0.7
Merged pull request: 2,016
Bot issues: 8
Bot pull requests: 1,847
Past year issues: 228
Past year pull requests: 296
Past year average time to close issues: 18 days
Past year average time to close pull requests: 16 days
Past year issue authors: 112
Past year pull request authors: 80
Past year average comments per issue: 0.94
Past year average comments per pull request: 0.49
Past year merged pull request: 78
Past year bot issues: 0
Past year bot pull requests: 159
Top Issue Authors
- jzheaux (398)
- rwinch (223)
- sjohnr (109)
- marcusdacoregio (105)
- jgrandja (36)
- dreamstar-enterprises (28)
- CrazyParanoid (17)
- OrangeDog (16)
- franticticktick (13)
- spring-projects-issues (11)
- sasirekha98 (10)
- Kehrlann (8)
- dependabot[bot] (7)
- aelillie (6)
- ZIRAKrezovic (5)
Top Pull Request Authors
- dependabot[bot] (1,782)
- ngocnhan-tran1996 (127)
- kse-music (108)
- franticticktick (69)
- github-actions[bot] (64)
- Kehrlann (41)
- therepanic (41)
- CrazyParanoid (34)
- jzheaux (34)
- evgeniycheban (21)
- marcusdacoregio (17)
- sjohnr (17)
- harpreets789 (15)
- quaff (12)
- wtigerhyunsu (11)
Top Issue Labels
- type: enhancement (809)
- type: bug (806)
- status: waiting-for-triage (717)
- status: forward-port (261)
- in: oauth2 (207)
- in: web (159)
- in: docs (154)
- in: core (143)
- in: config (116)
- in: build (97)
- type: task (95)
- status: duplicate (72)
- in: saml2 (62)
- status: feedback-provided (56)
- status: ideal-for-contribution (54)
- type: breaks-passivity (44)
- type: dependency-upgrade (31)
- status: invalid (26)
- status: waiting-for-feedback (22)
- in: test (18)
- status: declined (15)
- type: theme (14)
- for: stackoverflow (14)
- in: ldap (13)
- in: messaging (12)
- type: jira (11)
- in: cas (10)
- in: crypto (8)
- for: team-attention (8)
- status: blocked (4)
Top Pull Request Labels
- type: dependency-upgrade (1,647)
- type: enhancement (500)
- in: build (315)
- status: waiting-for-triage (315)
- type: bug (240)
- type: task (239)
- in: docs (184)
- in: web (168)
- in: oauth2 (145)
- in: core (127)
- status: duplicate (117)
- in: config (97)
- javascript (82)
- status: declined (64)
- type: breaks-passivity (36)
- status: feedback-provided (27)
- in: saml2 (26)
- status: waiting-for-feedback (19)
- github_actions (18)
- in: crypto (11)
- status: invalid (8)
- in: ldap (6)
- status: forward-port (6)
- status: blocked (4)
- in: messaging (3)
- Epic (2)
- in: cas (2)
- for: team-attention (2)
- dependencies (2)
- in: test (2)
Package metadata
- Total packages: 40
- Total downloads: unknown
- Total docker downloads: 19,303,605,836
- Total dependent packages: 8,764 (may contain duplicates)
- Total dependent repositories: 373,101 (may contain duplicates)
- Total versions: 5,694
- Total advisories: 54
repo1.maven.org: org.springframework.security:spring-security-core
Spring Security
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-core/
- Licenses: Apache License, Version 2.0
- Latest release: 7.1.1 (published 3 days ago)
- Last Synced: 2026-08-22T09:06:44.920Z (1 day ago)
- Versions: 285
- Dependent Packages: 1,940
- Dependent Repositories: 44,289
- Docker Downloads: 5,539,415,866
-
Rankings:
- Dependent repos count: 0.021%
- Dependent packages count: 0.037%
- Docker downloads count: 0.719%
- Average: 1.08%
- Forks count: 1.295%
- Stargazers count: 3.326%
-
Advisories:
- Spring Security Vulnerable to User Attribute Enumeration when Using DaoAuthenticationProvider
- Spring Security Core has a TOCTOU race condition when One-Time Token login with JdbcOneTimeTokenService is configured
- Spring Security has a broken timing attack mitigation implemented in DaoAuthenticationProvide
- Spring Security annotation detection mechanism has authorization bypass
- Spring Security Vulnerable to Authorization Bypass via Security Annotations
- Spring Framework has Authorization Bypass for Case Sensitive Comparisons
- Spring Security Missing Authorization vulnerability
- Erroneous authentication pass in Spring Security
- Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated
- Spring Security logout not clearing security context
- Spring Security authorization rules can be bypassed via forward or include dispatcher types
- Authorization bypass in Spring Security
- Integer overflow in BCrypt class in Spring Security
- Improper Control of Generation of Code in Spring Security
- Exposure of Sensitive Information to an Unauthorized Actor in Spring Security
- Concurrent Execution using Shared Resource with Improper Synchronization in Spring Security
- Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data
- Authentication Bypass Using an Alternate Path or Channel in SpringSource Spring Security and Acegi Security
- Deserialization of Untrusted Data in Spring Security
- Improper Authentication in Spring Security
- Resource Exhaustion in Spring Security
- Security Constraint Bypass in Spring Security
- Authorization Bypass in Spring Security
- Insufficient Entropy in Spring Security
- Signature wrapping vulnerability in Spring Security
- Insufficiently Protected Credentials and Improper Authentication in Spring Security
- Spring Security uses insufficiently random values
- Spring Security vulnerable to Authorization Bypass
- Spring Security and Spring Framework may not recognize certain paths that should be protected
- Improper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-core
repo1.maven.org: org.springframework.security:spring-security-bom
Spring Security
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-bom/
- Licenses: Apache License, Version 2.0
- Latest release: 7.1.1 (published 3 days ago)
- Last Synced: 2026-08-23T01:13:16.228Z (about 24 hours ago)
- Versions: 259
- Dependent Packages: 127
- Dependent Repositories: 3,910
-
Rankings:
- Dependent repos count: 0.155%
- Dependent packages count: 0.593%
- Forks count: 1.295%
- Average: 1.342%
- Stargazers count: 3.326%
- Advisories:
repo1.maven.org: org.springframework.security:spring-security-test
Spring Security
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-test/
- Licenses: Apache License, Version 2.0
- Latest release: 7.1.1 (published 3 days ago)
- Last Synced: 2026-08-22T16:35:50.806Z (1 day ago)
- Versions: 248
- Dependent Packages: 600
- Dependent Repositories: 111,243
- Docker Downloads: 2,331,033
-
Rankings:
- Dependent repos count: 0.008%
- Dependent packages count: 0.13%
- Forks count: 1.295%
- Average: 1.361%
- Docker downloads count: 2.043%
- Stargazers count: 3.326%
repo1.maven.org: org.springframework.security:spring-security-config
Spring Security
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-config/
- Licenses: Apache License, Version 2.0
- Latest release: 7.1.1 (published 3 days ago)
- Last Synced: 2026-08-22T09:09:40.608Z (1 day ago)
- Versions: 276
- Dependent Packages: 1,227
- Dependent Repositories: 65,079
- Docker Downloads: 1,040,771,828
-
Rankings:
- Dependent repos count: 0.017%
- Dependent packages count: 0.061%
- Forks count: 1.295%
- Average: 1.413%
- Docker downloads count: 2.367%
- Stargazers count: 3.326%
-
Advisories:
- Spring Security Doesn't Correctly Include Servlet Path in Path Matching of XML Authorization Rules
- Spring Security Doesn't Correctly Include Servlet Path in Path Matching of HttpSecurity#securityMatchers
- Spring Security's spring-security.xsd file is world writable
- Access Control Bypass in Spring Security
- Spring Security's authorization rules can be misconfigured when using multiple servlets
repo1.maven.org: org.springframework.security:spring-security-web
Spring Security
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-web/
- Licenses: Apache License, Version 2.0
- Latest release: 7.1.1 (published 3 days ago)
- Last Synced: 2026-08-22T16:33:26.869Z (1 day ago)
- Versions: 276
- Dependent Packages: 1,257
- Dependent Repositories: 64,125
- Docker Downloads: 5,391,392,635
-
Rankings:
- Dependent repos count: 0.017%
- Dependent packages count: 0.059%
- Forks count: 1.295%
- Average: 1.415%
- Docker downloads count: 2.373%
- Stargazers count: 3.331%
-
Advisories:
- Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates
- Spring Security: Open Redirect via Unvalidated Post-Login Redirect URL Stored in CookieRequestCache
- Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates
- Spring Security HTTP Headers Are not Written Under Some Conditions
- Spring Security vulnerable to Authorization Bypass of Static Resources in WebFlux Applications
- Privilege escalation in spring security
repo1.maven.org: org.springframework.security.oauth.boot:spring-security-oauth2-autoconfigure
spring-security-oauth2-autoconfigure
- Homepage: https://spring.io/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security.oauth.boot/spring-security-oauth2-autoconfigure/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 2.6.8 (published over 4 years ago)
- Last Synced: 2026-08-22T16:35:52.130Z (1 day ago)
- Versions: 94
- Dependent Packages: 185
- Dependent Repositories: 5,728
- Docker Downloads: 2,058,199
-
Rankings:
- Dependent repos count: 0.122%
- Dependent packages count: 0.423%
- Forks count: 1.295%
- Average: 1.426%
- Docker downloads count: 1.964%
- Stargazers count: 3.326%
repo1.maven.org: org.springframework.security:spring-security-oauth2-core
Spring Security
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-oauth2-core/
- Licenses: Apache License, Version 2.0
- Latest release: 7.1.1 (published 3 days ago)
- Last Synced: 2026-08-22T16:35:55.472Z (1 day ago)
- Versions: 216
- Dependent Packages: 103
- Dependent Repositories: 232
- Docker Downloads: 447,170,750
-
Rankings:
- Dependent packages count: 0.724%
- Docker downloads count: 0.931%
- Dependent repos count: 1.065%
- Forks count: 1.295%
- Average: 1.469%
- Stargazers count: 3.326%
repo1.maven.org: org.springframework.security:spring-security-taglibs
Spring Security
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-taglibs/
- Licenses: Apache License, Version 2.0
- Latest release: 7.1.1 (published 3 days ago)
- Last Synced: 2026-08-22T16:33:45.638Z (1 day ago)
- Versions: 285
- Dependent Packages: 255
- Dependent Repositories: 30,988
- Docker Downloads: 87,428,248
-
Rankings:
- Dependent repos count: 0.03%
- Dependent packages count: 0.316%
- Forks count: 1.295%
- Average: 1.472%
- Docker downloads count: 2.391%
- Stargazers count: 3.326%
repo1.maven.org: org.springframework.security:spring-security-ldap
Spring Security
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-ldap/
- Licenses: Apache License, Version 2.0
- Latest release: 7.1.1 (published 3 days ago)
- Last Synced: 2026-08-22T16:33:23.581Z (1 day ago)
- Versions: 276
- Dependent Packages: 288
- Dependent Repositories: 3,040
- Docker Downloads: 409,991,633
-
Rankings:
- Dependent repos count: 0.186%
- Dependent packages count: 0.284%
- Forks count: 1.295%
- Average: 1.493%
- Docker downloads count: 2.375%
- Stargazers count: 3.326%
repo1.maven.org: org.springframework.security:spring-security-acl
Spring Security
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-acl/
- Licenses: Apache License, Version 2.0
- Latest release: 7.1.1 (published 3 days ago)
- Last Synced: 2026-08-22T16:33:22.015Z (1 day ago)
- Versions: 285
- Dependent Packages: 167
- Dependent Repositories: 5,856
- Docker Downloads: 87,538,638
-
Rankings:
- Dependent repos count: 0.12%
- Dependent packages count: 0.46%
- Forks count: 1.295%
- Average: 1.516%
- Docker downloads count: 2.375%
- Stargazers count: 3.331%
repo1.maven.org: org.springframework.security:spring-security-rsocket
Spring Security
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-rsocket/
- Licenses: Apache License, Version 2.0
- Latest release: 7.1.1 (published 3 days ago)
- Last Synced: 2026-08-22T16:34:55.520Z (1 day ago)
- Versions: 182
- Dependent Packages: 64
- Dependent Repositories: 396
-
Rankings:
- Dependent repos count: 0.723%
- Dependent packages count: 1.116%
- Forks count: 1.295%
- Average: 1.615%
- Stargazers count: 3.326%
repo1.maven.org: org.springframework.security:spring-security-aspects
Spring Security
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-aspects/
- Licenses: Apache License, Version 2.0
- Latest release: 7.1.1 (published 3 days ago)
- Last Synced: 2026-08-22T16:33:56.078Z (1 day ago)
- Versions: 271
- Dependent Packages: 106
- Dependent Repositories: 445
- Docker Downloads: 156,351
-
Rankings:
- Dependent repos count: 0.668%
- Dependent packages count: 0.708%
- Forks count: 1.295%
- Average: 1.702%
- Docker downloads count: 2.513%
- Stargazers count: 3.326%
- Advisories:
repo1.maven.org: org.springframework.security:spring-security-cas
Spring Security
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-cas/
- Licenses: Apache License, Version 2.0
- Latest release: 7.1.1 (published 3 days ago)
- Last Synced: 2026-08-22T16:37:13.469Z (1 day ago)
- Versions: 258
- Dependent Packages: 573
- Dependent Repositories: 1,660
- Docker Downloads: 5,853,942
-
Rankings:
- Dependent packages count: 0.136%
- Dependent repos count: 0.281%
- Forks count: 1.295%
- Average: 1.865%
- Stargazers count: 3.331%
- Docker downloads count: 4.281%
- Advisories:
repo1.maven.org: org.springframework.security:spring-security-oauth2-jose
Spring Security
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-oauth2-jose/
- Licenses: Apache License, Version 2.0
- Latest release: 7.1.1 (published 3 days ago)
- Last Synced: 2026-08-22T16:37:13.544Z (1 day ago)
- Versions: 216
- Dependent Packages: 219
- Dependent Repositories: 3,571
- Docker Downloads: 431,484,799
-
Rankings:
- Dependent repos count: 0.167%
- Dependent packages count: 0.365%
- Forks count: 1.295%
- Average: 1.925%
- Stargazers count: 3.326%
- Docker downloads count: 4.471%
- Advisories:
repo1.maven.org: org.springframework.session:spring-session-bom
Spring Session BOM
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.session/spring-session-bom/
- Licenses: Apache License, Version 2.0
- Latest release: 2021.2.3 (published almost 3 years ago)
- Last Synced: 2026-08-22T16:33:51.871Z (1 day ago)
- Versions: 113
- Dependent Packages: 27
- Dependent Repositories: 448
-
Rankings:
- Dependent repos count: 0.663%
- Forks count: 1.295%
- Average: 1.927%
- Dependent packages count: 2.424%
- Stargazers count: 3.326%
repo1.maven.org: org.springframework.security:spring-security-oauth2-client
Spring Security
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-oauth2-client/
- Licenses: Apache License, Version 2.0
- Latest release: 7.1.1 (published 3 days ago)
- Last Synced: 2026-08-22T16:35:49.601Z (1 day ago)
- Versions: 216
- Dependent Packages: 185
- Dependent Repositories: 3,366
- Docker Downloads: 442,821,134
-
Rankings:
- Dependent repos count: 0.175%
- Dependent packages count: 0.423%
- Forks count: 1.295%
- Average: 1.957%
- Stargazers count: 3.326%
- Docker downloads count: 4.567%
- Advisories:
repo1.maven.org: org.springframework.security:spring-security-oauth2-resource-server
Spring Security
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-oauth2-resource-server/
- Licenses: Apache License, Version 2.0
- Latest release: 7.1.1 (published 3 days ago)
- Last Synced: 2026-08-22T16:32:59.799Z (1 day ago)
- Versions: 196
- Dependent Packages: 186
- Dependent Repositories: 1,819
- Docker Downloads: 128,840,603
-
Rankings:
- Dependent repos count: 0.263%
- Dependent packages count: 0.42%
- Forks count: 1.295%
- Average: 2.051%
- Stargazers count: 3.326%
- Docker downloads count: 4.953%
repo1.maven.org: org.springframework.security:spring-security-crypto
Spring Security
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-crypto/
- Licenses: Apache License, Version 2.0
- Latest release: 7.1.1 (published 3 days ago)
- Last Synced: 2026-08-22T16:33:49.025Z (1 day ago)
- Versions: 267
- Dependent Packages: 732
- Dependent Repositories: 7,270
- Docker Downloads: 5,223,553,977
-
Rankings:
- Dependent repos count: 0.102%
- Dependent packages count: 0.102%
- Forks count: 1.295%
- Average: 2.068%
- Stargazers count: 3.326%
- Docker downloads count: 5.515%
- Advisories:
repo1.maven.org: org.springframework.security:spring-security-openid
Spring Security
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-openid/
- Licenses: Apache License, Version 2.0
- Latest release: 5.8.16 (published almost 2 years ago)
- Last Synced: 2026-08-22T16:33:22.362Z (1 day ago)
- Versions: 199
- Dependent Packages: 120
- Dependent Repositories: 634
- Docker Downloads: 188,797
-
Rankings:
- Dependent repos count: 0.521%
- Dependent packages count: 0.628%
- Forks count: 1.295%
- Average: 2.368%
- Stargazers count: 3.326%
- Docker downloads count: 6.072%
repo1.maven.org: org.springframework.security:spring-security-data
Spring Security
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-data/
- Licenses: Apache License, Version 2.0
- Latest release: 7.1.1 (published 3 days ago)
- Last Synced: 2026-08-22T16:35:21.343Z (1 day ago)
- Versions: 248
- Dependent Packages: 102
- Dependent Repositories: 14,735
- Docker Downloads: 19,655,775
-
Rankings:
- Dependent repos count: 0.059%
- Dependent packages count: 0.729%
- Forks count: 1.295%
- Average: 2.483%
- Stargazers count: 3.326%
- Docker downloads count: 7.005%
repo1.maven.org: org.springframework.security:spring-security-saml2-service-provider
Spring Security
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-saml2-service-provider/
- Licenses: Apache License, Version 2.0
- Latest release: 7.1.1 (published 3 days ago)
- Last Synced: 2026-08-22T16:35:00.674Z (1 day ago)
- Versions: 182
- Dependent Packages: 69
- Dependent Repositories: 439
- Docker Downloads: 42,793,256
-
Rankings:
- Dependent repos count: 0.673%
- Dependent packages count: 1.049%
- Forks count: 1.295%
- Average: 2.49%
- Stargazers count: 3.326%
- Docker downloads count: 6.105%
-
Advisories:
- Spring Security SAML2 Service Provider: Decryption Oracle Vulnerability from Unsigned SAML Response and Logout Payloads
- Spring Security SAML2 Service Provider: RelyingPartyRegistration may run arbitrary code on HTML forms generated by Spring Security filters
- Spring Security SAML2 Service Provider is vulnerable to Deserialization of Untrusted Data via JdbcAssertingPartyMetadataRepository
- Spring Security SAML2 Service Provider: Unbounded writer inflates the compressed SAML payload into memory (DoS)
repo1.maven.org: org.springframework.security:spring-security-messaging
Spring Security
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-messaging/
- Licenses: Apache License, Version 2.0
- Latest release: 7.1.1 (published 3 days ago)
- Last Synced: 2026-08-22T16:34:22.741Z (1 day ago)
- Versions: 248
- Dependent Packages: 108
- Dependent Repositories: 2,742
- Docker Downloads: 156,528
-
Rankings:
- Dependent repos count: 0.197%
- Dependent packages count: 0.697%
- Forks count: 1.295%
- Average: 2.505%
- Stargazers count: 3.331%
- Docker downloads count: 7.005%
repo1.maven.org: org.springframework.security:spring-security-remoting
Spring Security
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-remoting/
- Licenses: Apache License, Version 2.0
- Latest release: 5.8.16 (published almost 2 years ago)
- Last Synced: 2026-08-22T16:33:26.974Z (1 day ago)
- Versions: 181
- Dependent Packages: 75
- Dependent Repositories: 166
- Docker Downloads: 601
-
Rankings:
- Dependent packages count: 0.97%
- Forks count: 1.295%
- Dependent repos count: 1.34%
- Average: 2.594%
- Stargazers count: 3.331%
- Docker downloads count: 6.034%
repo1.maven.org: org.springframework.security:spring-security-oauth2-authorization-server
Spring Security
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-oauth2-authorization-server/
- Licenses: Apache License, Version 2.0
- Latest release: 7.1.1 (published 3 days ago)
- Last Synced: 2026-08-22T16:43:53.501Z (1 day ago)
- Versions: 80
- Dependent Packages: 35
- Dependent Repositories: 738
- Docker Downloads: 1,243
-
Rankings:
- Dependent repos count: 0.472%
- Dependent packages count: 1.887%
- Average: 3.604%
- Stargazers count: 4.87%
- Forks count: 5.148%
- Docker downloads count: 5.643%
- Advisories:
repo1.maven.org: org.springframework.geode:spring-geode-starter-logging
spring-geode-starter-logging
- Homepage: https://spring.io/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.geode/spring-geode-starter-logging/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 1.7.5 (published almost 4 years ago)
- Last Synced: 2026-08-22T16:36:28.444Z (1 day ago)
- Versions: 63
- Dependent Packages: 4
- Dependent Repositories: 5
-
Rankings:
- Forks count: 1.295%
- Stargazers count: 3.326%
- Average: 7.367%
- Dependent repos count: 10.919%
- Dependent packages count: 13.926%
repo1.maven.org: io.spring.nohttp:nohttp-gradle
nohttp-gradle
- Homepage: https://spring.io/spring-security
- Documentation: https://appdoc.app/artifact/io.spring.nohttp/nohttp-gradle/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 0.0.11 (published over 3 years ago)
- Last Synced: 2026-08-22T16:37:11.691Z (1 day ago)
- Versions: 10
- Dependent Packages: 2
- Dependent Repositories: 68
-
Rankings:
- Forks count: 1.302%
- Dependent repos count: 2.517%
- Stargazers count: 3.332%
- Average: 7.577%
- Dependent packages count: 23.158%
repo1.maven.org: org.springframework.security.experimental:spring-security-oauth2-authorization-server
spring-security-oauth2-authorization-server
- Homepage: https://spring.io/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security.experimental/spring-security-oauth2-authorization-server/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 0.1.2 (published about 5 years ago)
- Last Synced: 2026-08-22T16:33:51.981Z (1 day ago)
- Versions: 6
- Dependent Packages: 2
- Dependent Repositories: 66
-
Rankings:
- Forks count: 1.295%
- Dependent repos count: 2.557%
- Stargazers count: 3.326%
- Average: 7.584%
- Dependent packages count: 23.158%
repo1.maven.org: io.spring.nohttp:nohttp
nohttp
- Homepage: https://spring.io/spring-security
- Documentation: https://appdoc.app/artifact/io.spring.nohttp/nohttp/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 0.0.11 (published over 3 years ago)
- Last Synced: 2026-08-22T16:37:47.959Z (1 day ago)
- Versions: 11
- Dependent Packages: 2
- Dependent Repositories: 3
-
Rankings:
- Forks count: 1.302%
- Stargazers count: 3.332%
- Average: 10.393%
- Dependent repos count: 13.781%
- Dependent packages count: 23.158%
repo1.maven.org: io.spring.nohttp:nohttp-checkstyle
nohttp-checkstyle
- Homepage: https://spring.io/spring-security
- Documentation: https://appdoc.app/artifact/io.spring.nohttp/nohttp-checkstyle/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 0.0.11 (published over 3 years ago)
- Last Synced: 2026-08-22T16:32:49.283Z (1 day ago)
- Versions: 11
- Dependent Packages: 1
- Dependent Repositories: 6
-
Rankings:
- Forks count: 1.302%
- Stargazers count: 3.332%
- Dependent repos count: 10.031%
- Average: 11.913%
- Dependent packages count: 32.986%
repo1.maven.org: org.springframework.geode:apache-geode-extensions
apache-geode-extensions
- Homepage: https://spring.io/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.geode/apache-geode-extensions/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 1.7.5 (published almost 4 years ago)
- Last Synced: 2026-08-22T16:32:54.009Z (1 day ago)
- Versions: 91
- Dependent Packages: 3
- Dependent Repositories: 0
-
Rankings:
- Forks count: 1.023%
- Stargazers count: 2.751%
- Average: 13.164%
- Dependent packages count: 16.904%
- Dependent repos count: 31.98%
repo1.maven.org: org.springframework.security:spring-security-samples-messages-jc
spring-security-samples-messages-jc
- Homepage: http://spring.io/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-samples-messages-jc/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 3.2.10.RELEASE (published over 9 years ago)
- Last Synced: 2026-08-22T16:33:25.544Z (1 day ago)
- Versions: 16
- Dependent Packages: 0
- Dependent Repositories: 28
-
Rankings:
- Forks count: 1.295%
- Stargazers count: 3.326%
- Dependent repos count: 4.433%
- Average: 14.802%
- Dependent packages count: 50.151%
repo1.maven.org: org.springframework.security:spring-security-samples-javaconfig-messages
spring-security-samples-javaconfig-messages
- Homepage: https://spring.io/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-samples-javaconfig-messages/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 4.2.13.RELEASE (published about 7 years ago)
- Last Synced: 2026-08-22T16:33:01.610Z (1 day ago)
- Versions: 20
- Dependent Packages: 0
- Dependent Repositories: 6
-
Rankings:
- Forks count: 1.295%
- Stargazers count: 3.326%
- Dependent repos count: 10.031%
- Average: 16.201%
- Dependent packages count: 50.151%
repo1.maven.org: io.spring.nohttp:nohttp-cli
nohttp-cli
- Homepage: https://spring.io/spring-security
- Documentation: https://appdoc.app/artifact/io.spring.nohttp/nohttp-cli/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 0.0.11 (published over 3 years ago)
- Last Synced: 2026-08-22T16:33:24.914Z (1 day ago)
- Versions: 11
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Forks count: 1.006%
- Stargazers count: 2.692%
- Average: 21.135%
- Dependent repos count: 31.98%
- Dependent packages count: 48.86%
repo1.maven.org: org.springframework.build.test:sgbcs-api
sgbcs-api
- Homepage: http://spring.io/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.build.test/sgbcs-api/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 0.0.6.RELEASE (published almost 9 years ago)
- Last Synced: 2026-08-22T16:34:53.246Z (1 day ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Forks count: 1.023%
- Stargazers count: 2.751%
- Average: 21.154%
- Dependent repos count: 31.98%
- Dependent packages count: 48.86%
repo1.maven.org: org.springframework.build.test:sgbcs-core
sgbcs-core
- Homepage: http://spring.io/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.build.test/sgbcs-core/
- Licenses: The Apache Software License, Version 2.0
- Latest release: 0.0.6.RELEASE (published almost 9 years ago)
- Last Synced: 2026-08-22T16:34:16.326Z (1 day ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Forks count: 1.023%
- Stargazers count: 2.751%
- Average: 21.154%
- Dependent repos count: 31.98%
- Dependent packages count: 48.86%
repo1.maven.org: org.springframework.security:spring-security-kerberos-client
Spring Security Kerberos Client
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-kerberos-client/
- Licenses: Apache License, Version 2.0
- Latest release: 7.1.1 (published 3 days ago)
- Last Synced: 2026-08-22T16:37:11.794Z (1 day ago)
- Versions: 19
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 30.847%
- Average: 37.474%
- Dependent packages count: 44.101%
repo1.maven.org: org.springframework.security:spring-security-kerberos-web
Spring Security Kerberos Web
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-kerberos-web/
- Licenses: Apache License, Version 2.0
- Latest release: 7.1.1 (published 3 days ago)
- Last Synced: 2026-08-22T16:32:48.739Z (1 day ago)
- Versions: 19
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 30.847%
- Average: 37.474%
- Dependent packages count: 44.101%
repo1.maven.org: org.springframework.security:spring-security-webauthn
Spring Security
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-webauthn/
- Licenses: Apache License, Version 2.0
- Latest release: 7.1.1 (published 3 days ago)
- Last Synced: 2026-08-22T16:32:57.922Z (1 day ago)
- Versions: 20
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 31.344%
- Average: 38.078%
- Dependent packages count: 44.812%
repo1.maven.org: org.springframework.security:spring-security-kerberos-core
Spring Security Kerberos Core
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-kerberos-core/
- Licenses: Apache License, Version 2.0
- Latest release: 7.1.1 (published 3 days ago)
- Last Synced: 2026-08-22T16:37:05.513Z (1 day ago)
- Versions: 19
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 31.344%
- Average: 38.078%
- Dependent packages count: 44.812%
repo1.maven.org: org.springframework.security:spring-security-access
Spring Security
- Homepage: https://spring.io/projects/spring-security
- Documentation: https://appdoc.app/artifact/org.springframework.security/spring-security-access/
- Licenses: Apache License, Version 2.0
- Latest release: 7.1.1 (published 3 days ago)
- Last Synced: 2026-08-22T16:33:22.790Z (1 day ago)
- Versions: 19
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 31.344%
- Average: 38.078%
- Dependent packages count: 44.812%
Dependencies
.github/workflows/auto-merge-dependabot.yml
actions
.github/workflows/continuous-integration-workflow.yml
actions
- actions/checkout v3 composite
- actions/setup-java v3 composite
- gradle/gradle-build-action v2 composite
- sjohnr/slack-workflow-status v1-beta composite
- slackapi/slack-github-action v1.19.0 composite
- spring-io/spring-gradle-build-action v1 composite
.github/workflows/deploy-docs.yml
actions
- actions/checkout v3 composite
.github/workflows/pr-build-workflow.yml
actions
- actions/checkout v3 composite
- spring-io/spring-gradle-build-action v1 composite
.github/workflows/clean_build_artifacts.yml
actions
.github/workflows/gradle-wrapper-upgrade-execution.yml
actions
- actions/checkout v4 composite
- actions/setup-java v3 composite
- gradle/gradle-build-action v2 composite
buildSrc/src/test/resources/samples/jacoco/java/build.gradle
maven
- junit:junit 4.12 testCompile
.github/workflows/update-antora-ui-spring.yml
actions
- spring-io/spring-doc-actions/update-antora-spring-ui e28269199d1d27975cf7f65e16d6095c555b3cd0 composite
buildSrc/src/test/resources/samples/maven/install/build.gradle
maven
- junit:junit 4.12 testCompile
buildSrc/src/test/resources/samples/testsconfiguration/web/build.gradle
maven
- junit:junit 4.12 testImplementation
docs/package.json
npm
- @antora/atlas-extension 1.0.0-alpha.5
- @antora/collector-extension 1.0.2
- @asciidoctor/tabs 1.0.0-beta.6
- @springio/antora-extensions 1.14.7
- @springio/asciidoctor-extensions 1.0.0-alpha.17
- antora 3.2.0-alpha.11
buildSrc/src/test/resources/samples/javadocapi/multimodule/build.gradle
maven
buildSrc/src/test/resources/samples/integrationtest/withpropdeps/build.gradle
maven
- junit:junit 4.12 testCompile
buildSrc/src/test/resources/samples/showcase/build.gradle
maven
.github/workflows/check-snapshots.yml
actions
- spring-io/spring-security-release-tools/.github/actions/send-notification v1 composite
.github/workflows/codeql.yml
actions
buildSrc/src/test/resources/samples/maven/signing/build.gradle
maven
- junit:junit 4.12 testCompile
javascript/package-lock.json
npm
- 254 dependencies
build.gradle
maven
buildSrc/src/test/resources/samples/javadocapi/multimodule/api/build.gradle
maven
buildSrc/build.gradle
maven
- io.projectreactor:reactor-core * implementation
- org.junit.jupiter:junit-jupiter-api * testImplementation
- org.junit.jupiter:junit-jupiter-engine * testImplementation
- org.junit.jupiter:junit-jupiter-params * testImplementation
- org.mockito:mockito-core * testImplementation
- org.mockito:mockito-junit-jupiter * testImplementation
- org.junit.platform:junit-platform-launcher * testRuntimeOnly
buildSrc/src/test/resources/samples/testsconfiguration/build.gradle
maven
buildSrc/src/test/resources/samples/testsconfiguration/core/build.gradle
maven
buildSrc/src/test/resources/samples/integrationtest/withgroovy/build.gradle
maven
- junit:junit 4.12 testCompile
- org.spockframework:spock-core 1.0-groovy-2.4 testCompile
buildSrc/src/test/resources/samples/integrationtest/withjava/build.gradle
maven
- junit:junit 4.12 testCompile
buildSrc/src/test/resources/samples/javadocapi/multimodule/impl/build.gradle
maven
buildSrc/src/test/resources/samples/javadocapi/multimodule/sample/build.gradle
maven
buildSrc/src/test/resources/samples/maven/install-with-springio/build.gradle
maven
- org.springframework:spring-core * compile
- junit:junit 4.12 testCompile
buildSrc/src/test/resources/samples/maven/upload/build.gradle
maven
- junit:junit 4.12 testCompile
javascript/package.json
npm
- @eslint/js ^9.6.0 development
- @types/sinon ^17.0.3 development
- chai ~4.3 development
- esbuild ^0.25.0 development
- eslint ^9.6.0 development
- eslint-config-prettier ^9.1.0 development
- eslint-plugin-prettier ^5.1.3 development
- globals ^15.8.0 development
- mocha ~10.8 development
- prettier ^3.3.2 development
- prettier-eslint ~15.0 development
- sinon ^18.0.0 development
.github/workflows/defer-issues.yml
actions
- actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
- spring-io/spring-release-actions/compute-next-version a1f321783a0769dd2aea4fad6c2ae2f95a52b885 composite
- spring-io/spring-release-actions/compute-version a1f321783a0769dd2aea4fad6c2ae2f95a52b885 composite
- spring-io/spring-release-actions/get-todays-release-version a1f321783a0769dd2aea4fad6c2ae2f95a52b885 composite
- spring-io/spring-release-actions/schedule-milestone a1f321783a0769dd2aea4fad6c2ae2f95a52b885 composite
.github/workflows/release-announcements-stage.yml
actions
.github/workflows/release-announcements-publish.yml
actions