APM, Application Performance Monitoring System
apache/skywalking holds a health index of 94 out of 100, placing it in the Exceptional band. It scores highest on Community & Adoption (96/100) and lowest on Security (55/100). It was last updated today. 2 contributors account for most of its recent work.
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 81 is calibrated to 94 on the published index scale (record calibration 2026-08-02).
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Maven | org.apache.skywalking:mqe-rt | 10.1.0 | - | 4 | 667 days ago |
| Maven | org.apache.skywalking:oal-rt | 10.1.0 | - | 28 | 667 days ago |
| Maven | org.apache.skywalking:exporter | 10.1.0 | - | 30 | 667 days ago |
| Maven | org.apache.skywalking:ai-pipeline | 10.1.0 | - | 5 | 667 days ago |
| Maven | org.apache.skywalking:mqe-grammar | 10.1.0 | - | 5 | 667 days ago |
| Maven | org.apache.skywalking:oal-grammar | 10.1.0 | - | 28 | 667 days ago |
| Maven | org.apache.skywalking:server-core | 10.1.0 | - | 33 | 667 days ago |
| Maven | org.apache.skywalking:apm-network | 10.1.0 | - | 38 | 667 days ago |
Is the project alive — is code being written and are releases shipping?
| 36/36 | Push recency — last push 0 days ago |
| 35.3/36 | Commit cadence — 51/52 weeks with commits |
| 18/18 | Commit volume — 255 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10 |
| commits_last_year | 255 |
| human_commit_share | 1 |
| days_since_last_push | 0 |
| active_weeks_last_year | 51 |
| 27/27 | Ships releases — 64 releases published |
| 27/36 | Release recency — latest release 125 days ago |
| 12.6/27 | Release cadence — a release every ~124.4 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
| releases_count | 64 |
| latest_release_tag | v10.4.0 |
| releases_from_tags | no |
| days_since_latest_release | 125 |
| mean_days_between_releases | 124.4 |
Does the project have users, downloads, attention, and a welcoming setup for contributors?
| 60/60 | Stars — 24,906 stars |
| 25/25 | Forks — 6,629 forks |
| 15/15 | Watchers — 808 watchers |
| forks | 6,629 |
| stars | 24,906 |
| watchers | 808 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 18/18 | CONTRIBUTING guide |
| 13.5/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 6.3/6.3 | PR template |
| has_readme | yes |
| has_license | yes |
| readme_badges | 3 |
| has_contributing | yes |
| has_issue_template | no |
| has_code_of_conduct | yes |
| readme_badge_services | shields.io |
| has_pull_request_template | yes |
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
| 25.2/54 | Bus factor — 2 contributor(s) cover half of all commits |
| 12.9/22.5 | Commit distribution — top contributor authored 42% of commits |
| 13.5/13.5 | Contributor breadth — 100 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 49 contributing companies or organizations |
| bus_factor | 2 |
| contributors_sampled | 100 |
| top_contributor_share | 0.425 |
| 41.9/42 | Issue resolution — 100% of issues closed |
| 26.5/30 | PR acceptance — 5,082/5,760 decided PRs merged |
| 0/13 | Newcomer PR acceptance — no first-time contributor's PR decided in 30d |
| 15/15 | OpenSSF Scorecard: Code-Review — all changesets reviewed |
| merged_prs | 5,082 |
| open_issues | 20 |
| closed_issues | 5,728 |
| prs_merged_7d | 2 |
| prs_decided_7d | 2 |
| prs_merged_30d | 10 |
| prs_decided_30d | 10 |
| issue_closed_ratio | 0.997 |
| closed_unmerged_prs | 678 |
| first_time_authors_30d | 0 |
| first_time_prs_merged_30d | 0 |
| first_time_prs_decided_30d | 0 |
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain — verified-domain status not read for this organization |
| 25/25 | Owner reach — 23,682 followers of apache |
| 25/25 | Track record — 3,150 public repos, account ~17 yr old |
| followers | 23,682 |
| owner_type | Organization |
| is_verified | — |
| owner_login | apache |
| public_repos | 3,150 |
| account_age_days | 6,408 |
| 25/25 | Published & resolvable — 8 package(s) on maven |
| 14/35 | Publish recency — latest publish 667 days ago |
| 20/20 | Version history — 38 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
| packages | org.apache.skywalking:mqe-rt, org.apache.skywalking:oal-rt, org.apache.skywalking:exporter, org.apache.skywalking:ai-pipeline, org.apache.skywalking:mqe-grammar, org.apache.skywalking:oal-grammar, org.apache.skywalking:server-core, org.apache.skywalking:apm-network |
| ecosystems | maven |
| any_deprecated | no |
| min_days_since_publish | 667 |
Are baseline engineering and documentation practices in place?
| 24/24 | CI workflows — 5 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
| 30/30 | README |
| 25/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://skywalking.apache.org/ |
| 10/10 | Repository description |
| 10/10 | Topics — 14 topics |
| 0/10 | Wiki |
| topics | skywalking, observability, apm, service-mesh, dapper, distributed-tracing, web-performance, metrics, logging, prometheus, open-telemetry, zabbix, ebpf, telegraf |
| has_wiki | no |
| homepage | https://skywalking.apache.org/ |
| docs_site | https://skywalking.apache.org/ |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — no data |
| 2.5/2.5 | CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 7.5/7.5 | Code-Review — all changesets reviewed |
| 2.5/2.5 | Contributors — project has 49 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 0.5/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1 |
| 4.5/5 | SAST — SAST tool detected but not run on all commits |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 17 existing vulnerabilities detected |
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 6.1 |
| 12.8/35 | Direct dependencies free of known advisories — 2 affected: org.apache.skywalking:server-core 10.1.0 (high 7.5), org.apache.logging.log4j:log4j-core 2.17.1 (low 3.7) |
| 2.4/25 | Indirect dependencies free of known advisories — 14 affected: com.fasterxml.jackson.core:jackson-core 2.16.0 (high 7.5), com.fasterxml.jackson.core:jackson-databind 2.16.0 (high 8.1), io.netty:netty-codec 4.1.108.Final (high 7.5), +11 more |
| 14/40 | No advisories left outstanding — 11 advisory-carrying package(s) unaddressed past 90 days; oldest published 630 days ago |
| source | osv |
| advisories | 58 |
| affected_packages | 16 |
| assessed_packages | 91 |
| unassessed_packages | 0 |
| affected_by_severity | high 10, moderate 5, low 1 |
| direct_affected_packages | 2 |
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
| 45/45 | Agent instructions — CLAUDE.md, oap-server/analyzer/hierarchy/CLAUDE.md, oap-server/analyzer/log-analyzer/CLAUDE.md, oap-server/analyzer/meter-analyzer/CLAUDE.md, oap-server/oal-rt/CLAUDE.md, oap-server/server-library/library-batch-queue/CLAUDE.md, test/e2e-v2/CLAUDE.md |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 77 of 100 human commits state their intent (structured subject or explanatory body) |
| has_llms_txt | no |
| llms_txt_url | — |
| legible_history_share | 0.77 |
| agent_instruction_files | CLAUDE.md, oap-server/analyzer/hierarchy/CLAUDE.md, oap-server/analyzer/log-analyzer/CLAUDE.md, oap-server/analyzer/meter-analyzer/CLAUDE.md, oap-server/oal-rt/CLAUDE.md, oap-server/server-library/library-batch-queue/CLAUDE.md, test/e2e-v2/CLAUDE.md |
| agent_instruction_max_bytes | 24,732 |
| 18/18 | One-command bootstrap — Makefile, docs/en/setup/envoy/examples/metrics/Makefile, test/Makefile |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — Java (statically typed) |
| 10/10 | Reproducible environment — Dockerfile |
| 2/10 | Demonstrated agent practice — 1 of the last 100 commits agent-authored or agent-credited |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 1/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1 |
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | yes |
| typed_language | yes |
| bootstrap_files | Makefile, docs/en/setup/envoy/examples/metrics/Makefile, test/Makefile |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0.01 |
| toolchain_manifests | apm-dist/pom.xml, apm-protocol/apm-network/pom.xml, apm-protocol/pom.xml, oap-server-bom/pom.xml, oap-server/ai-pipeline/pom.xml, oap-server/analyzer/agent-analyzer/pom.xml, oap-server/analyzer/event-analyzer/pom.xml, oap-server/analyzer/gen-ai-analyzer/pom.xml, oap-server/analyzer/hierarchy/pom.xml, oap-server/analyzer/ios-analyzer/pom.xml, oap-server/analyzer/log-analyzer/pom.xml, oap-server/analyzer/meter-analyzer-scripts-test/pom.xml, oap-server/analyzer/meter-analyzer/pom.xml, oap-server/analyzer/pom.xml, oap-server/exporter/pom.xml, oap-server/mqe-grammar/pom.xml, oap-server/mqe-rt/pom.xml, oap-server/oal-grammar/pom.xml, oap-server/oal-rt/pom.xml, oap-server/pom.xml, oap-server/server-admin/admin-server/pom.xml, oap-server/server-admin/dsl-debugging/pom.xml, oap-server/server-admin/inspect/pom.xml, oap-server/server-admin/pom.xml, oap-server/server-admin/runtime-rule/pom.xml, oap-server/server-admin/status/pom.xml, oap-server/server-admin/ui-management/pom.xml, oap-server/server-alarm-plugin/pom.xml, oap-server/server-cluster-plugin/cluster-consul-plugin/pom.xml, oap-server/server-cluster-plugin/cluster-etcd-plugin/pom.xml, oap-server/server-cluster-plugin/cluster-kubernetes-plugin/pom.xml, oap-server/server-cluster-plugin/cluster-nacos-plugin/pom.xml, oap-server/server-cluster-plugin/cluster-standalone-plugin/pom.xml, oap-server/server-cluster-plugin/cluster-zookeeper-plugin/pom.xml, oap-server/server-cluster-plugin/pom.xml, oap-server/server-configuration/configuration-api/pom.xml, oap-server/server-configuration/configuration-apollo/pom.xml, oap-server/server-configuration/configuration-consul/pom.xml, oap-server/server-configuration/configuration-etcd/pom.xml, oap-server/server-configuration/configuration-k8s-configmap/pom.xml, oap-server/server-configuration/configuration-nacos/pom.xml, oap-server/server-configuration/configuration-zookeeper/pom.xml, oap-server/server-configuration/grpc-configuration-sync/pom.xml, oap-server/server-configuration/pom.xml, oap-server/server-core/pom.xml, oap-server/server-fetcher-plugin/cilium-fetcher-plugin/pom.xml, oap-server/server-fetcher-plugin/fetcher-proto/pom.xml, oap-server/server-fetcher-plugin/kafka-fetcher-plugin/pom.xml, oap-server/server-fetcher-plugin/pom.xml, oap-server/server-health-checker/pom.xml, oap-server/server-library/library-async-profiler-jfr-parser/pom.xml, oap-server/server-library/library-banyandb-client/pom.xml, oap-server/server-library/library-batch-queue/pom.xml, oap-server/server-library/library-client/pom.xml, oap-server/server-library/library-elasticsearch-client/pom.xml, oap-server/server-library/library-integration-test/pom.xml, oap-server/server-library/library-kubernetes-support/pom.xml, oap-server/server-library/library-module/pom.xml, oap-server/server-library/library-pprof-parser/pom.xml, oap-server/server-library/library-server/pom.xml, oap-server/server-library/library-util/pom.xml, oap-server/server-library/pom.xml, oap-server/server-query-plugin/logql-plugin/pom.xml, oap-server/server-query-plugin/pom.xml, oap-server/server-query-plugin/promql-plugin/pom.xml, oap-server/server-query-plugin/query-graphql-plugin/pom.xml, oap-server/server-query-plugin/traceql-plugin/pom.xml, oap-server/server-query-plugin/zipkin-query-plugin/pom.xml, oap-server/server-receiver-plugin/aws-firehose-receiver/pom.xml, oap-server/server-receiver-plugin/configuration-discovery-receiver-plugin/pom.xml, oap-server/server-receiver-plugin/envoy-metrics-receiver-plugin/pom.xml, oap-server/server-receiver-plugin/otel-receiver-plugin/pom.xml, oap-server/server-receiver-plugin/pom.xml, oap-server/server-receiver-plugin/receiver-proto/pom.xml, oap-server/server-receiver-plugin/skywalking-async-profiler-receiver-plugin/pom.xml, oap-server/server-receiver-plugin/skywalking-browser-receiver-plugin/pom.xml, oap-server/server-receiver-plugin/skywalking-clr-receiver-plugin/pom.xml, oap-server/server-receiver-plugin/skywalking-ebpf-receiver-plugin/pom.xml, oap-server/server-receiver-plugin/skywalking-event-receiver-plugin/pom.xml, oap-server/server-receiver-plugin/skywalking-jvm-receiver-plugin/pom.xml, oap-server/server-receiver-plugin/skywalking-log-receiver-plugin/pom.xml, oap-server/server-receiver-plugin/skywalking-management-receiver-plugin/pom.xml, oap-server/server-receiver-plugin/skywalking-mesh-receiver-plugin/pom.xml, oap-server/server-receiver-plugin/skywalking-meter-receiver-plugin/pom.xml, oap-server/server-receiver-plugin/skywalking-pprof-receiver-plugin/pom.xml, oap-server/server-receiver-plugin/skywalking-profile-receiver-plugin/pom.xml, oap-server/server-receiver-plugin/skywalking-sharing-server-plugin/pom.xml, oap-server/server-receiver-plugin/skywalking-telegraf-receiver-plugin/pom.xml, oap-server/server-receiver-plugin/skywalking-trace-receiver-plugin/pom.xml, oap-server/server-receiver-plugin/skywalking-zabbix-receiver-plugin/pom.xml, oap-server/server-receiver-plugin/zipkin-receiver-plugin/pom.xml, oap-server/server-starter/pom.xml, oap-server/server-storage-plugin/pom.xml, oap-server/server-storage-plugin/storage-banyandb-plugin/pom.xml, oap-server/server-storage-plugin/storage-elasticsearch-plugin/pom.xml, oap-server/server-storage-plugin/storage-jdbc-hikaricp-plugin/pom.xml, oap-server/server-telemetry/pom.xml, oap-server/server-telemetry/telemetry-api/pom.xml, oap-server/server-telemetry/telemetry-prometheus/pom.xml, oap-server/server-testing/pom.xml, oap-server/server-tools/data-generator/pom.xml, oap-server/server-tools/pom.xml, oap-server/server-tools/profile-exporter/pom.xml, oap-server/server-tools/profile-exporter/tool-profile-snapshot-bootstrap/pom.xml, oap-server/server-tools/profile-exporter/tool-profile-snapshot-exporter/pom.xml, oap-server/server-tools/profile-exporter/tool-profile-snapshot-server-mock/pom.xml, pom.xml, test/e2e-v2/cases/go/service/go.mod, test/e2e-v2/cases/profiling/ebpf/network/go.mod, test/e2e-v2/java-test-service/e2e-mock-baseline-server/pom.xml, test/e2e-v2/java-test-service/e2e-mock-sender/pom.xml, test/e2e-v2/java-test-service/e2e-protocol/pom.xml, test/e2e-v2/java-test-service/e2e-service-consumer/pom.xml, test/e2e-v2/java-test-service/e2e-service-provider/pom.xml, test/e2e-v2/java-test-service/opentelemetry-proto/pom.xml, test/e2e-v2/java-test-service/pom.xml, test/e2e-v2/java-test-service/trace-mocker/pom.xml |
| dependency_bot_commit_share | 0 |
| 45/45 | Type-checkable code — Java (statically typed) |
| 54.9/55 | Manageable file sizes — 3/2,680 source files over 60KB |
| primary_language | Java |
| largest_source_bytes | 139,632 |
| source_files_sampled | 2,680 |
| oversized_source_files | 3 |
| 40/40 | API schema (OpenAPI/GraphQL/proto) — oap-server/ai-pipeline/src/main/proto/ai_http_uri_recognition.proto, oap-server/ai-pipeline/src/main/proto/baseline.proto, oap-server/exporter/src/main/proto/metric-exporter.proto, oap-server/server-admin/dsl-debugging/src/main/proto/dsl-debugging-cluster.proto, oap-server/server-admin/runtime-rule/src/main/proto/runtime-rule-cluster.proto, oap-server/server-alarm-plugin/src/main/proto/alarm-hook.proto, oap-server/server-configuration/grpc-configuration-sync/src/main/proto/configuration-service.proto, oap-server/server-core/src/main/proto/RemoteService.proto, oap-server/server-core/src/main/proto/SpanWrapper.proto, oap-server/server-fetcher-plugin/fetcher-proto/src/main/proto/cilium/hubble/flow/flow.proto, oap-server/server-fetcher-plugin/fetcher-proto/src/main/proto/cilium/hubble/observer/observer.proto, oap-server/server-fetcher-plugin/fetcher-proto/src/main/proto/cilium/hubble/peer/peer.proto, oap-server/server-fetcher-plugin/fetcher-proto/src/main/proto/cilium/hubble/relay/relay.proto, oap-server/server-library/library-pprof-parser/src/main/proto/profile.proto, oap-server/server-query-plugin/traceql-plugin/src/main/proto/tempopb/tempo.proto, oap-server/server-receiver-plugin/aws-firehose-receiver/src/main/proto/opentelemetry/proto/collector/metrics/v1/metrics_service.proto, oap-server/server-receiver-plugin/aws-firehose-receiver/src/main/proto/opentelemetry/proto/common/v1/common.proto, oap-server/server-receiver-plugin/aws-firehose-receiver/src/main/proto/opentelemetry/proto/metrics/experimental/configservice.proto, oap-server/server-receiver-plugin/aws-firehose-receiver/src/main/proto/opentelemetry/proto/metrics/v1/metrics.proto, oap-server/server-receiver-plugin/aws-firehose-receiver/src/main/proto/opentelemetry/proto/resource/v1/resource.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/envoy/config/core/v3/address.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/envoy/config/core/v3/backoff.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/envoy/config/core/v3/base.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/envoy/config/core/v3/http_uri.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/envoy/config/core/v3/socket_option.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/envoy/data/accesslog/v3/accesslog.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/envoy/service/accesslog/v2/als.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/envoy/service/accesslog/v3/als.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/envoy/service/metrics/v2/metrics_service.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/envoy/service/metrics/v3/metrics_service.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/envoy/type/v3/percent.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/envoy/type/v3/semantic_version.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/opentelemetry/proto/collector/logs/v1/logs_service.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/opentelemetry/proto/collector/metrics/v1/metrics_service.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/opentelemetry/proto/collector/trace/v1/trace_service.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/opentelemetry/proto/common/v1/common.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/opentelemetry/proto/logs/v1/logs.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/opentelemetry/proto/metrics/v1/metrics.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/opentelemetry/proto/resource/v1/resource.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/opentelemetry/proto/trace/v1/trace.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/prometheus/client_model/metrics.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/satellite/envoy/accesslog/v3/als.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/udpa/annotations/migrate.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/udpa/annotations/status.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/udpa/annotations/versioning.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/validate/validate.proto, test/e2e-v2/java-test-service/e2e-mock-baseline-server/src/main/proto/baseline.proto, test/e2e-v2/java-test-service/opentelemetry-proto/src/main/proto/opentelemetry/proto/collector/logs/v1/logs_service.proto, test/e2e-v2/java-test-service/opentelemetry-proto/src/main/proto/opentelemetry/proto/collector/metrics/v1/metrics_service.proto, test/e2e-v2/java-test-service/opentelemetry-proto/src/main/proto/opentelemetry/proto/collector/trace/v1/trace_service.proto, test/e2e-v2/java-test-service/opentelemetry-proto/src/main/proto/opentelemetry/proto/common/v1/common.proto, test/e2e-v2/java-test-service/opentelemetry-proto/src/main/proto/opentelemetry/proto/logs/v1/logs.proto, test/e2e-v2/java-test-service/opentelemetry-proto/src/main/proto/opentelemetry/proto/metrics/v1/metrics.proto, test/e2e-v2/java-test-service/opentelemetry-proto/src/main/proto/opentelemetry/proto/resource/v1/resource.proto, test/e2e-v2/java-test-service/opentelemetry-proto/src/main/proto/opentelemetry/proto/trace/v1/trace.proto |
| 0/20 | MCP server |
| 40/40 | Runnable examples — examples, sample |
| example_dirs | examples, sample |
| has_mcp_signal | no |
| api_schema_files | oap-server/ai-pipeline/src/main/proto/ai_http_uri_recognition.proto, oap-server/ai-pipeline/src/main/proto/baseline.proto, oap-server/exporter/src/main/proto/metric-exporter.proto, oap-server/server-admin/dsl-debugging/src/main/proto/dsl-debugging-cluster.proto, oap-server/server-admin/runtime-rule/src/main/proto/runtime-rule-cluster.proto, oap-server/server-alarm-plugin/src/main/proto/alarm-hook.proto, oap-server/server-configuration/grpc-configuration-sync/src/main/proto/configuration-service.proto, oap-server/server-core/src/main/proto/RemoteService.proto, oap-server/server-core/src/main/proto/SpanWrapper.proto, oap-server/server-fetcher-plugin/fetcher-proto/src/main/proto/cilium/hubble/flow/flow.proto, oap-server/server-fetcher-plugin/fetcher-proto/src/main/proto/cilium/hubble/observer/observer.proto, oap-server/server-fetcher-plugin/fetcher-proto/src/main/proto/cilium/hubble/peer/peer.proto, oap-server/server-fetcher-plugin/fetcher-proto/src/main/proto/cilium/hubble/relay/relay.proto, oap-server/server-library/library-pprof-parser/src/main/proto/profile.proto, oap-server/server-query-plugin/traceql-plugin/src/main/proto/tempopb/tempo.proto, oap-server/server-receiver-plugin/aws-firehose-receiver/src/main/proto/opentelemetry/proto/collector/metrics/v1/metrics_service.proto, oap-server/server-receiver-plugin/aws-firehose-receiver/src/main/proto/opentelemetry/proto/common/v1/common.proto, oap-server/server-receiver-plugin/aws-firehose-receiver/src/main/proto/opentelemetry/proto/metrics/experimental/configservice.proto, oap-server/server-receiver-plugin/aws-firehose-receiver/src/main/proto/opentelemetry/proto/metrics/v1/metrics.proto, oap-server/server-receiver-plugin/aws-firehose-receiver/src/main/proto/opentelemetry/proto/resource/v1/resource.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/envoy/config/core/v3/address.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/envoy/config/core/v3/backoff.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/envoy/config/core/v3/base.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/envoy/config/core/v3/http_uri.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/envoy/config/core/v3/socket_option.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/envoy/data/accesslog/v3/accesslog.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/envoy/service/accesslog/v2/als.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/envoy/service/accesslog/v3/als.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/envoy/service/metrics/v2/metrics_service.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/envoy/service/metrics/v3/metrics_service.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/envoy/type/v3/percent.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/envoy/type/v3/semantic_version.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/opentelemetry/proto/collector/logs/v1/logs_service.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/opentelemetry/proto/collector/metrics/v1/metrics_service.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/opentelemetry/proto/collector/trace/v1/trace_service.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/opentelemetry/proto/common/v1/common.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/opentelemetry/proto/logs/v1/logs.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/opentelemetry/proto/metrics/v1/metrics.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/opentelemetry/proto/resource/v1/resource.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/opentelemetry/proto/trace/v1/trace.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/prometheus/client_model/metrics.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/satellite/envoy/accesslog/v3/als.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/udpa/annotations/migrate.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/udpa/annotations/status.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/udpa/annotations/versioning.proto, oap-server/server-receiver-plugin/receiver-proto/src/main/proto/validate/validate.proto, test/e2e-v2/java-test-service/e2e-mock-baseline-server/src/main/proto/baseline.proto, test/e2e-v2/java-test-service/opentelemetry-proto/src/main/proto/opentelemetry/proto/collector/logs/v1/logs_service.proto, test/e2e-v2/java-test-service/opentelemetry-proto/src/main/proto/opentelemetry/proto/collector/metrics/v1/metrics_service.proto, test/e2e-v2/java-test-service/opentelemetry-proto/src/main/proto/opentelemetry/proto/collector/trace/v1/trace_service.proto, test/e2e-v2/java-test-service/opentelemetry-proto/src/main/proto/opentelemetry/proto/common/v1/common.proto, test/e2e-v2/java-test-service/opentelemetry-proto/src/main/proto/opentelemetry/proto/logs/v1/logs.proto, test/e2e-v2/java-test-service/opentelemetry-proto/src/main/proto/opentelemetry/proto/metrics/v1/metrics.proto, test/e2e-v2/java-test-service/opentelemetry-proto/src/main/proto/opentelemetry/proto/resource/v1/resource.proto, test/e2e-v2/java-test-service/opentelemetry-proto/src/main/proto/opentelemetry/proto/trace/v1/trace.proto |
| interfaces_expected_of | network-service |
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Only the most recent history is shown — this repository exceeds the collection window, so the earliest history is not captured.
Each point covers 4 days.
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| n/a | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 10 | CI-Tests | 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 10 | Code-Review | all changesets reviewed |
| 10 | Contributors | project has 49 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 1 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 1 |
| 9 | SAST | SAST tool detected but not run on all commits |
| 10 | Security-Policy | security policy file detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 17 existing vulnerabilities detected |
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Maven | org.apache.skywalking:oap-server-bom | ${project.version} | apm-dist/pom.xml |
| Maven | org.apache.skywalking:server-starter | ${project.version} | apm-dist/pom.xml |
| Maven | io.netty:netty-bom | ${netty.version} | oap-server-bom/pom.xml |
| Maven | com.linecorp.armeria:armeria-bom | ${armeria.version} | oap-server-bom/pom.xml |
| Maven | org.slf4j:slf4j-api | ${slf4j.version} | oap-server-bom/pom.xml |
| Maven | org.slf4j:jcl-over-slf4j | ${slf4j.version} | oap-server-bom/pom.xml |
| Maven | org.slf4j:log4j-over-slf4j | ${slf4j.version} | oap-server-bom/pom.xml |
| Maven | org.apache.logging.log4j:log4j-core | ${log4j.version} | oap-server-bom/pom.xml |
| Maven | org.apache.logging.log4j:log4j-api | ${log4j.version} | oap-server-bom/pom.xml |
| Maven | com.google.errorprone:error_prone_annotations | ${google.error_prone_annotations} | oap-server-bom/pom.xml |
| Maven | com.graphql-java-kickstart:graphql-java-tools | ${graphql-java-tools.version} | oap-server-bom/pom.xml |
| Maven | com.graphql-java:graphql-java | ${graphql-java.version} | oap-server-bom/pom.xml |
| Maven | com.graphql-java:graphql-java-extended-scalars | ${graphql-java-extended-scalars.version} | oap-server-bom/pom.xml |
| Maven | com.google.code.gson:gson | ${gson.version} | oap-server-bom/pom.xml |
| Maven | com.squareup.okhttp3:okhttp | ${okhttp.version} | oap-server-bom/pom.xml |
| Maven | joda-time:joda-time | ${joda-time.version} | oap-server-bom/pom.xml |
| Maven | org.apache.zookeeper:zookeeper | ${zookeeper.version} | oap-server-bom/pom.xml |
| Maven | com.google.guava:guava | ${guava.version} | oap-server-bom/pom.xml |
| Maven | org.yaml:snakeyaml | ${snakeyaml.version} | oap-server-bom/pom.xml |
| Maven | org.apache.logging.log4j:log4j-slf4j-impl | ${log4j.version} | oap-server-bom/pom.xml |
| Maven | io.grpc:grpc-core | ${grpc.version} | oap-server-bom/pom.xml |
| Maven | io.grpc:grpc-api | ${grpc.version} | oap-server-bom/pom.xml |
| Maven | io.grpc:grpc-netty | ${grpc.version} | oap-server-bom/pom.xml |
| Maven | io.grpc:grpc-protobuf | ${grpc.version} | oap-server-bom/pom.xml |
| Maven | com.google.protobuf:protobuf-java | ${protobuf-java.version} | oap-server-bom/pom.xml |
| Maven | com.google.protobuf:protobuf-java-util | ${protobuf-java-util.version} | oap-server-bom/pom.xml |
| Maven | io.grpc:grpc-stub | ${grpc.version} | oap-server-bom/pom.xml |
| Maven | io.grpc:grpc-services | ${grpc.version} | oap-server-bom/pom.xml |
| Maven | io.netty:netty-tcnative-boringssl-static | ${netty-tcnative-boringssl-static.version} | oap-server-bom/pom.xml |
| Maven | io.grpc:grpc-grpclb | ${grpc.version} | oap-server-bom/pom.xml |
| Maven | commons-io:commons-io | ${commons-io.version} | oap-server-bom/pom.xml |
| Maven | io.fabric8:kubernetes-client-bom | ${kubernetes.version} | oap-server-bom/pom.xml |
| Maven | io.fabric8:kubernetes-client | ${kubernetes.version} | oap-server-bom/pom.xml |
| Maven | com.zaxxer:HikariCP | ${hikaricp.version} | oap-server-bom/pom.xml |
| Maven | io.zipkin.zipkin2:zipkin | ${zipkin.version} | oap-server-bom/pom.xml |
| Maven | io.zipkin:zipkin-lens | ${zipkin.version} | oap-server-bom/pom.xml |
| Maven | com.fasterxml.jackson.core:jackson-core | ${jackson.version} | oap-server-bom/pom.xml |
| Maven | com.fasterxml.jackson.core:jackson-annotations | ${jackson.version} | oap-server-bom/pom.xml |
| Maven | com.fasterxml.jackson.core:jackson-databind | ${jackson-databind.version} | oap-server-bom/pom.xml |
| Maven | com.fasterxml.jackson.datatype:jackson-datatype-jdk8 | ${jackson.version} | oap-server-bom/pom.xml |
| Maven | com.fasterxml.jackson.datatype:jackson-datatype-guava | ${jackson.version} | oap-server-bom/pom.xml |
| Maven | commons-codec:commons-codec | ${commons-codec.version} | oap-server-bom/pom.xml |
| Maven | org.apache.commons:commons-lang3 | ${commons-lang3.version} | oap-server-bom/pom.xml |
| Maven | commons-net:commons-net | ${commons-net.version} | oap-server-bom/pom.xml |
| Maven | io.prometheus:simpleclient | ${simpleclient.version} | oap-server-bom/pom.xml |
| Maven | com.ctrip.framework.apollo:apollo-client | ${apollo.version} | oap-server-bom/pom.xml |
| Maven | com.alibaba.nacos:nacos-client | ${nacos.version} | oap-server-bom/pom.xml |
| Maven | io.etcd:jetcd-core | ${jetcd.version} | oap-server-bom/pom.xml |
| Maven | org.apache.skywalking:banyandb-java-client | ${banyandb-java-client.version} | oap-server-bom/pom.xml |
| Maven | org.apache.curator:curator-x-discovery | ${curator.version} | oap-server-bom/pom.xml |
| Maven | org.freemarker:freemarker | ${freemarker.version} | oap-server-bom/pom.xml |
| Maven | org.javassist:javassist | ${javaassist.version} | oap-server-bom/pom.xml |
| Maven | org.apache.commons:commons-text | ${commons-text.version} | oap-server-bom/pom.xml |
| Maven | io.vavr:vavr | ${vavr.version} | oap-server-bom/pom.xml |
| Maven | org.apache.groovy:groovy | ${groovy.version} | oap-server-bom/pom.xml |
| Maven | commons-beanutils:commons-beanutils | ${commons-beanutils.version} | oap-server-bom/pom.xml |
| Maven | org.apache.httpcomponents:httpclient | ${httpclient.version} | oap-server-bom/pom.xml |
| Maven | org.apache.httpcomponents:httpasyncclient | ${httpasyncclient.version} | oap-server-bom/pom.xml |
| Maven | com.google.flatbuffers:flatbuffers-java | ${flatbuffers-java.version} | oap-server-bom/pom.xml |
| Maven | org.postgresql:postgresql | ${postgresql.version} | oap-server-bom/pom.xml |
| Maven | com.linecorp.armeria:armeria | ${armeria.version} | oap-server-bom/pom.xml |
| Maven | com.linecorp.armeria:armeria-grpc | ${armeria.version} | oap-server-bom/pom.xml |
| Maven | org.apache.httpcomponents:httpcore | ${httpcore.version} | oap-server-bom/pom.xml |
| Maven | org.apache.httpcomponents:httpcore-nio | ${httpcore.version} | oap-server-bom/pom.xml |
| Maven | org.apache.commons:commons-compress | ${commons-compress.version} | oap-server-bom/pom.xml |
| Maven | org.apache.kafka:kafka-clients | ${kafka-clients.version} | oap-server-bom/pom.xml |
| Maven | org.kiwiproject:consul-client | ${consul.client.version} | oap-server-bom/pom.xml |
| Maven | org.apache.maven:maven-plugin-api | ${maven-core.version} | oap-server-bom/pom.xml |
| Maven | tools.profiler:async-profiler-converter | ${async-profiler-converter.version} | oap-server-bom/pom.xml |
| Maven | io.micrometer:micrometer-core | ${micrometer.version} | oap-server-bom/pom.xml |
| Maven | org.slf4j:slf4j-api | — | oap-server/pom.xml |
| Maven | org.slf4j:log4j-over-slf4j | — | oap-server/pom.xml |
| Maven | org.apache.logging.log4j:log4j-core | — | oap-server/pom.xml |
| Maven | org.apache.logging.log4j:log4j-slf4j-impl | — | oap-server/pom.xml |
| Maven | com.google.guava:guava | — | oap-server/pom.xml |
| Maven | com.google.errorprone:error_prone_annotations | — | oap-server/pom.xml |
| Maven | org.apache.skywalking:apm-network | ${project.version} | oap-server/pom.xml |
| Maven | org.apache.skywalking:library-util | ${project.version} | oap-server/pom.xml |
| Maven | org.apache.skywalking:oap-server-bom | ${project.version} | oap-server/pom.xml |
| Maven | org.assertj:assertj-core | — | pom.xml |
| Maven | org.junit:junit-bom | ${junit.version} | pom.xml |
| Maven | org.antlr:antlr4-runtime | ${antlr.version} | pom.xml |
| Maven | com.google.protobuf:protobuf-bom | ${protobuf-java.version} | pom.xml |
| Maven | org.projectlombok:lombok | ${lombok.version} | pom.xml |
| Maven | io.grpc:grpc-netty | ${grpc.version} | apm-protocol/apm-network/pom.xml |
| Maven | io.grpc:grpc-protobuf | ${grpc.version} | apm-protocol/apm-network/pom.xml |
| Maven | io.grpc:grpc-stub | ${grpc.version} | apm-protocol/apm-network/pom.xml |
| Maven | io.netty:netty-tcnative-boringssl-static | ${netty-tcnative-boringssl-static.version} | apm-protocol/apm-network/pom.xml |
| Maven | com.google.code.gson:gson | ${gson.version} | apm-protocol/apm-network/pom.xml |
| Maven | io.grpc:grpc-netty | ${grpc.version} | oap-server/ai-pipeline/pom.xml |
| Maven | io.grpc:grpc-protobuf | ${grpc.version} | oap-server/ai-pipeline/pom.xml |
| Maven | io.grpc:grpc-stub | ${grpc.version} | oap-server/ai-pipeline/pom.xml |
| Maven | org.apache.skywalking:library-module | ${project.version} | oap-server/ai-pipeline/pom.xml |
| Maven | org.apache.skywalking:library-client | ${project.version} | oap-server/ai-pipeline/pom.xml |
| Maven | org.apache.skywalking:server-core | ${project.version} | oap-server/ai-pipeline/pom.xml |
| Maven | org.apache.skywalking:apm-network | ${project.version} | oap-server/analyzer/pom.xml |
| Maven | org.apache.skywalking:library-module | ${project.version} | oap-server/analyzer/pom.xml |
| Maven | org.apache.skywalking:library-util | ${project.version} | oap-server/analyzer/pom.xml |
| Maven | org.apache.skywalking:server-core | ${project.version} | oap-server/exporter/pom.xml |
| Maven | org.apache.skywalking:library-batch-queue | ${project.version} | oap-server/exporter/pom.xml |
| Maven | org.apache.kafka:kafka-clients | — | oap-server/exporter/pom.xml |
| Maven | org.antlr:antlr4-runtime | — | oap-server/mqe-grammar/pom.xml |
| Maven | org.apache.skywalking:server-core | ${project.version} | oap-server/mqe-rt/pom.xml |
| Maven | org.apache.skywalking:library-util | ${project.version} | oap-server/mqe-rt/pom.xml |
| Maven | org.apache.skywalking:mqe-grammar | ${project.version} | oap-server/mqe-rt/pom.xml |
| Maven | org.apache.skywalking:ai-pipeline | ${project.version} | oap-server/mqe-rt/pom.xml |
| Maven | org.antlr:antlr4-runtime | — | oap-server/oal-grammar/pom.xml |
| Maven | org.apache.skywalking:server-core | ${project.version} | oap-server/oal-rt/pom.xml |
| Maven | org.apache.skywalking:oal-grammar | ${project.version} | oap-server/oal-rt/pom.xml |
| Maven | org.antlr:antlr4-runtime | — | oap-server/oal-rt/pom.xml |
| Maven | org.freemarker:freemarker | — | oap-server/oal-rt/pom.xml |
| Maven | commons-io:commons-io | — | oap-server/oal-rt/pom.xml |
| Maven | org.apache.skywalking:server-core | ${project.version} | oap-server/server-admin/pom.xml |
| Maven | org.apache.skywalking:library-module | ${project.version} | oap-server/server-admin/pom.xml |
| Maven | org.apache.skywalking:library-server | ${project.version} | oap-server/server-admin/pom.xml |
| Maven | org.apache.skywalking:library-util | ${project.version} | oap-server/server-admin/pom.xml |
| Maven | org.apache.skywalking:server-core | ${project.version} | oap-server/server-alarm-plugin/pom.xml |
| Maven | org.apache.skywalking:library-util | ${project.version} | oap-server/server-alarm-plugin/pom.xml |
| Maven | org.apache.skywalking:mqe-rt | ${project.version} | oap-server/server-alarm-plugin/pom.xml |
| Maven | org.apache.skywalking:library-module | ${project.version} | oap-server/server-cluster-plugin/pom.xml |
| Maven | org.apache.skywalking:library-util | ${project.version} | oap-server/server-cluster-plugin/pom.xml |
| Maven | org.apache.skywalking:server-testing | ${project.version} | oap-server/server-configuration/pom.xml |
| Maven | org.yaml:snakeyaml | — | oap-server/server-core/pom.xml |
| Maven | org.apache.skywalking:library-module | ${project.version} | oap-server/server-core/pom.xml |
| Maven | org.apache.skywalking:library-async-profiler-jfr-parser | ${project.version} | oap-server/server-core/pom.xml |
| Maven | org.apache.skywalking:library-pprof-parser | ${project.version} | oap-server/server-core/pom.xml |
| Maven | org.apache.skywalking:telemetry-api | ${project.version} | oap-server/server-core/pom.xml |
| Maven | org.apache.skywalking:configuration-api | ${project.version} | oap-server/server-core/pom.xml |
| Maven | org.apache.skywalking:library-util | ${project.version} | oap-server/server-core/pom.xml |
| Maven | org.apache.skywalking:library-client | ${project.version} | oap-server/server-core/pom.xml |
| Maven | org.apache.skywalking:library-server | ${project.version} | oap-server/server-core/pom.xml |
| Maven | org.apache.skywalking:library-batch-queue | ${project.version} | oap-server/server-core/pom.xml |
| Maven | org.apache.skywalking:apm-network | ${project.version} | oap-server/server-core/pom.xml |
| Maven | org.javassist:javassist | — | oap-server/server-core/pom.xml |
| Maven | io.vavr:vavr | — | oap-server/server-core/pom.xml |
| Maven | io.zipkin.zipkin2:zipkin | — | oap-server/server-core/pom.xml |
| Maven | io.vavr:vavr | — | oap-server/server-fetcher-plugin/pom.xml |
| Maven | org.apache.skywalking:server-core | ${project.version} | oap-server/server-fetcher-plugin/pom.xml |
| Maven | org.apache.skywalking:apm-network | ${project.version} | oap-server/server-fetcher-plugin/pom.xml |
| Maven | org.apache.skywalking:library-module | ${project.version} | oap-server/server-fetcher-plugin/pom.xml |
| Maven | org.apache.skywalking:library-util | ${project.version} | oap-server/server-fetcher-plugin/pom.xml |
| Maven | org.apache.skywalking:server-core | ${project.version} | oap-server/server-health-checker/pom.xml |
| Maven | org.apache.skywalking:library-module | ${project.version} | oap-server/server-query-plugin/pom.xml |
| Maven | org.apache.skywalking:server-core | ${project.version} | oap-server/server-query-plugin/pom.xml |
| Maven | org.apache.skywalking:server-core | ${project.version} | oap-server/server-receiver-plugin/pom.xml |
| Maven | org.apache.skywalking:apm-network | ${project.version} | oap-server/server-receiver-plugin/pom.xml |
| Maven | org.apache.skywalking:library-module | ${project.version} | oap-server/server-receiver-plugin/pom.xml |
| Maven | org.apache.skywalking:library-util | ${project.version} | oap-server/server-receiver-plugin/pom.xml |
| Maven | org.apache.skywalking:server-core | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:oal-rt | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:hierarchy | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:ios-analyzer | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:cluster-standalone-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:cluster-zookeeper-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:cluster-kubernetes-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:cluster-consul-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:cluster-etcd-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:cluster-nacos-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:skywalking-mesh-receiver-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:skywalking-management-receiver-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:skywalking-jvm-receiver-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:skywalking-trace-receiver-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:zipkin-receiver-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:zipkin-query-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:envoy-metrics-receiver-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:skywalking-clr-receiver-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:skywalking-profile-receiver-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:otel-receiver-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:skywalking-meter-receiver-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:skywalking-browser-receiver-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:skywalking-log-receiver-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:configuration-discovery-receiver-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:skywalking-event-receiver-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:skywalking-zabbix-receiver-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:skywalking-ebpf-receiver-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:skywalking-async-profiler-receiver-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:skywalking-pprof-receiver-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:admin-server | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:runtime-rule | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:dsl-debugging | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:status | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:inspect | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:ui-management | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:skywalking-telegraf-receiver-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:aws-firehose-receiver | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:kafka-fetcher-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:cilium-fetcher-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:storage-jdbc-hikaricp-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:storage-banyandb-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:query-graphql-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:promql-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:logql-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:traceql-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:server-alarm-plugin | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:telemetry-prometheus | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:exporter | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:grpc-configuration-sync | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:configuration-apollo | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:configuration-zookeeper | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:configuration-etcd | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:configuration-consul | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:configuration-k8s-configmap | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:configuration-nacos | ${project.version} | oap-server/server-starter/pom.xml |
| Maven | org.apache.skywalking:storage-elasticsearch-plugin | ${project.version} | oap-server/server-starter/pom.xml |
Full resolved dependency set from the GitHub dependency graph: 196 direct and 190 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Maven | com.alibaba.nacos:nacos-client | — | direct |
| Maven | com.alibaba.nacos:nacos-client | 2.3.2 | direct |
| Maven | com.ctrip.framework.apollo:apollo-client | — | direct |
| Maven | com.ctrip.framework.apollo:apollo-client | 1.8.0 | direct |
| Maven | com.fasterxml.jackson.core:jackson-annotations | 2.18.8 | direct |
| Maven | com.fasterxml.jackson.core:jackson-core | 2.18.8 | direct |
| Maven | com.fasterxml.jackson.core:jackson-databind | — | direct |
| Maven | com.fasterxml.jackson.core:jackson-databind | 2.18.8 | direct |
| Maven | com.fasterxml.jackson.datatype:jackson-datatype-guava | 2.18.8 | direct |
| Maven | com.fasterxml.jackson.datatype:jackson-datatype-jdk8 | 2.18.8 | direct |
| Maven | com.google.code.gson:gson | — | direct |
| Maven | com.google.errorprone:error_prone_annotations | — | direct |
| Maven | com.google.errorprone:error_prone_annotations | 2.11.0 | direct |
| Maven | com.google.flatbuffers:flatbuffers-java | — | direct |
| Maven | com.google.flatbuffers:flatbuffers-java | 1.12.0 | direct |
| Maven | com.google.guava:guava | — | direct |
| Maven | com.google.guava:guava | 32.0.0-jre | direct |
| Maven | com.google.guava:guava | 32.0.1-jre | direct |
| Maven | com.google.protobuf:protobuf-bom | 4.33.1 | direct |
| Maven | com.google.protobuf:protobuf-java | — | direct |
| Maven | com.google.protobuf:protobuf-java | 4.33.1 | direct |
| Maven | com.google.protobuf:protobuf-java-util | — | direct |
| Maven | com.google.protobuf:protobuf-java-util | 3.21.12 | direct |
| Maven | com.google.protobuf:protobuf-java-util | 4.33.1 | direct |
| Maven | com.graphql-java-kickstart:graphql-java-tools | — | direct |
| Maven | com.graphql-java-kickstart:graphql-java-tools | 13.0.1 | direct |
| Maven | com.graphql-java:graphql-java | — | direct |
| Maven | com.graphql-java:graphql-java | 21.5 | direct |
| Maven | com.graphql-java:graphql-java-extended-scalars | — | direct |
| Maven | com.graphql-java:graphql-java-extended-scalars | 18.1 | direct |
| Maven | com.linecorp.armeria:armeria | — | direct |
| Maven | com.linecorp.armeria:armeria | 1.34.2 | direct |
| Maven | com.linecorp.armeria:armeria-bom | 1.34.2 | direct |
| Maven | com.linecorp.armeria:armeria-grpc | — | direct |
| Maven | com.linecorp.armeria:armeria-grpc | 1.34.2 | direct |
| Maven | com.squareup.okhttp3:okhttp | 4.12.0 | direct |
| Maven | com.zaxxer:HikariCP | — | direct |
| Maven | com.zaxxer:HikariCP | 3.1.0 | direct |
| Maven | commons-beanutils:commons-beanutils | — | direct |
| Maven | commons-beanutils:commons-beanutils | 1.11.0 | direct |
| Maven | commons-codec:commons-codec | — | direct |
| Maven | commons-codec:commons-codec | 1.13 | direct |
| Maven | commons-io:commons-io | — | direct |
| Maven | commons-io:commons-io | 2.17.0 | direct |
| Maven | commons-net:commons-net | — | direct |
| Maven | commons-net:commons-net | 3.9.0 | direct |
| Maven | io.etcd:jetcd-core | — | direct |
| Maven | io.etcd:jetcd-core | 0.6.1 | direct |
| Maven | io.fabric8:kubernetes-client | — | direct |
| Maven | io.fabric8:kubernetes-client | 6.7.1 | direct |
| Maven | io.fabric8:kubernetes-client-bom | 6.7.1 | direct |
| Maven | io.grpc:grpc-api | — | direct |
| Maven | io.grpc:grpc-api | 1.43.2 | direct |
| Maven | io.grpc:grpc-core | — | direct |
| Maven | io.grpc:grpc-core | 1.43.2 | direct |
| Maven | io.grpc:grpc-grpclb | — | direct |
| Maven | io.grpc:grpc-netty | — | direct |
| Maven | io.grpc:grpc-netty | 1.43.2 | direct |
| Maven | io.grpc:grpc-protobuf | — | direct |
| Maven | io.grpc:grpc-protobuf | 1.43.2 | direct |
| Maven | io.grpc:grpc-services | — | direct |
| Maven | io.grpc:grpc-stub | — | direct |
| Maven | io.grpc:grpc-stub | 1.43.2 | direct |
| Maven | io.micrometer:micrometer-core | 1.14.4 | direct |
| Maven | io.netty:netty-bom | — | direct |
| Maven | io.netty:netty-tcnative-boringssl-static | — | direct |
| Maven | io.prometheus:simpleclient | 0.6.0 | direct |
| Maven | io.vavr:vavr | — | direct |
| Maven | io.vavr:vavr | 0.10.3 | direct |
| Maven | io.zipkin.zipkin2:zipkin | — | direct |
| Maven | io.zipkin.zipkin2:zipkin | 2.23.16 | direct |
| Maven | io.zipkin.zipkin2:zipkin | 2.24.1 | direct |
| Maven | io.zipkin:zipkin-lens | 2.24.1 | direct |
| Maven | joda-time:joda-time | — | direct |
| Maven | joda-time:joda-time | 2.10.5 | direct |
| Maven | org.antlr:antlr4-runtime | — | direct |
| Maven | org.antlr:antlr4-runtime | 4.11.1 | direct |
| Maven | org.apache.commons:commons-compress | — | direct |
| Maven | org.apache.commons:commons-compress | 1.26.2 | direct |
| Maven | org.apache.commons:commons-lang3 | 3.18.0 | direct |
| Maven | org.apache.commons:commons-text | — | direct |
| Maven | org.apache.commons:commons-text | 1.4 | direct |
| Maven | org.apache.curator:curator-x-discovery | — | direct |
| Maven | org.apache.curator:curator-x-discovery | 5.9.0 | direct |
| Maven | org.apache.groovy:groovy | 5.0.3 | direct |
| Maven | org.apache.httpcomponents:httpasyncclient | 4.1.5 | direct |
| Maven | org.apache.httpcomponents:httpclient | — | direct |
| Maven | org.apache.httpcomponents:httpclient | 4.5.13 | direct |
| Maven | org.apache.httpcomponents:httpcore | 4.4.16 | direct |
| Maven | org.apache.httpcomponents:httpcore-nio | — | direct |
| Maven | org.apache.httpcomponents:httpcore-nio | 4.4.16 | direct |
| Maven | org.apache.kafka:kafka-clients | — | direct |
| Maven | org.apache.kafka:kafka-clients | 3.9.2 | direct |
| Maven | org.apache.logging.log4j:log4j-api | 2.25.4 | direct |
| Maven | org.apache.logging.log4j:log4j-core | — | direct |
| Maven | org.apache.logging.log4j:log4j-core | 2.25.4 | direct |
| Maven | org.apache.logging.log4j:log4j-slf4j-impl | — | direct |
| Maven | org.apache.logging.log4j:log4j-slf4j-impl | 2.25.4 | direct |
| Maven | org.apache.maven:maven-plugin-api | 3.9.0 | direct |
| Maven | org.apache.skywalking:admin-server | — | direct |
| Maven | org.apache.skywalking:ai-pipeline | — | direct |
| Maven | org.apache.skywalking:apm-network | — | direct |
| Maven | org.apache.skywalking:aws-firehose-receiver | — | direct |
| Maven | org.apache.skywalking:banyandb-java-client | 0.9.2 | direct |
| Maven | org.apache.skywalking:cilium-fetcher-plugin | — | direct |
| Maven | org.apache.skywalking:cluster-consul-plugin | — | direct |
| Maven | org.apache.skywalking:cluster-etcd-plugin | — | direct |
| Maven | org.apache.skywalking:cluster-kubernetes-plugin | — | direct |
| Maven | org.apache.skywalking:cluster-nacos-plugin | — | direct |
| Maven | org.apache.skywalking:cluster-standalone-plugin | — | direct |
| Maven | org.apache.skywalking:cluster-zookeeper-plugin | — | direct |
| Maven | org.apache.skywalking:configuration-api | — | direct |
| Maven | org.apache.skywalking:configuration-apollo | — | direct |
| Maven | org.apache.skywalking:configuration-consul | — | direct |
| Maven | org.apache.skywalking:configuration-discovery-receiver-plugin | — | direct |
| Maven | org.apache.skywalking:configuration-etcd | — | direct |
| Maven | org.apache.skywalking:configuration-k8s-configmap | — | direct |
| Maven | org.apache.skywalking:configuration-nacos | — | direct |
| Maven | org.apache.skywalking:configuration-zookeeper | — | direct |
| Maven | org.apache.skywalking:dsl-debugging | — | direct |
| Maven | org.apache.skywalking:envoy-metrics-receiver-plugin | — | direct |
| Maven | org.apache.skywalking:exporter | — | direct |
| Maven | org.apache.skywalking:grpc-configuration-sync | — | direct |
| Maven | org.apache.skywalking:hierarchy | — | direct |
| Maven | org.apache.skywalking:inspect | — | direct |
| Maven | org.apache.skywalking:ios-analyzer | — | direct |
| Maven | org.apache.skywalking:kafka-fetcher-plugin | — | direct |
| Maven | org.apache.skywalking:library-async-profiler-jfr-parser | — | direct |
| Maven | org.apache.skywalking:library-batch-queue | — | direct |
| Maven | org.apache.skywalking:library-client | — | direct |
| Maven | org.apache.skywalking:library-module | — | direct |
| Maven | org.apache.skywalking:library-pprof-parser | — | direct |
| Maven | org.apache.skywalking:library-server | — | direct |
| Maven | org.apache.skywalking:library-util | — | direct |
| Maven | org.apache.skywalking:logql-plugin | — | direct |
| Maven | org.apache.skywalking:mqe-grammar | — | direct |
| Maven | org.apache.skywalking:mqe-rt | — | direct |
| Maven | org.apache.skywalking:oal-grammar | — | direct |
| Maven | org.apache.skywalking:oal-rt | — | direct |
| Maven | org.apache.skywalking:oap-server-bom | — | direct |
| Maven | org.apache.skywalking:otel-receiver-plugin | — | direct |
| Maven | org.apache.skywalking:promql-plugin | — | direct |
| Maven | org.apache.skywalking:query-graphql-plugin | — | direct |
| Maven | org.apache.skywalking:runtime-rule | — | direct |
| Maven | org.apache.skywalking:server-alarm-plugin | — | direct |
| Maven | org.apache.skywalking:server-core | — | direct |
| Maven | org.apache.skywalking:server-starter | — | direct |
| Maven | org.apache.skywalking:server-testing | — | direct |
| Maven | org.apache.skywalking:skywalking-async-profiler-receiver-plugin | — | direct |
| Maven | org.apache.skywalking:skywalking-browser-receiver-plugin | — | direct |
| Maven | org.apache.skywalking:skywalking-clr-receiver-plugin | — | direct |
| Maven | org.apache.skywalking:skywalking-ebpf-receiver-plugin | — | direct |
| Maven | org.apache.skywalking:skywalking-event-receiver-plugin | — | direct |
| Maven | org.apache.skywalking:skywalking-jvm-receiver-plugin | — | direct |
| Maven | org.apache.skywalking:skywalking-log-receiver-plugin | — | direct |
| Maven | org.apache.skywalking:skywalking-management-receiver-plugin | — | direct |
| Maven | org.apache.skywalking:skywalking-mesh-receiver-plugin | — | direct |
| Maven | org.apache.skywalking:skywalking-meter-receiver-plugin | — | direct |
| Maven | org.apache.skywalking:skywalking-pprof-receiver-plugin | — | direct |
| Maven | org.apache.skywalking:skywalking-profile-receiver-plugin | — | direct |
| Maven | org.apache.skywalking:skywalking-telegraf-receiver-plugin | — | direct |
| Maven | org.apache.skywalking:skywalking-trace-receiver-plugin | — | direct |
| Maven | org.apache.skywalking:skywalking-zabbix-receiver-plugin | — | direct |
| Maven | org.apache.skywalking:status | — | direct |
| Maven | org.apache.skywalking:storage-banyandb-plugin | — | direct |
| Maven | org.apache.skywalking:storage-elasticsearch-plugin | — | direct |
| Maven | org.apache.skywalking:storage-jdbc-hikaricp-plugin | — | direct |
| Maven | org.apache.skywalking:telemetry-api | — | direct |
| Maven | org.apache.skywalking:telemetry-prometheus | — | direct |
| Maven | org.apache.skywalking:traceql-plugin | — | direct |
| Maven | org.apache.skywalking:ui-management | — | direct |
| Maven | org.apache.skywalking:zipkin-query-plugin | — | direct |
| Maven | org.apache.skywalking:zipkin-receiver-plugin | — | direct |
| Maven | org.apache.zookeeper:zookeeper | 3.9.5 | direct |
| Maven | org.assertj:assertj-core | — | direct |
| Maven | org.assertj:assertj-core | 3.27.7 | direct |
| Maven | org.freemarker:freemarker | — | direct |
| Maven | org.freemarker:freemarker | 2.3.31 | direct |
| Maven | org.javassist:javassist | — | direct |
| Maven | org.javassist:javassist | 3.25.0-GA | direct |
| Maven | org.junit:junit-bom | 5.9.2 | direct |
| Maven | org.kiwiproject:consul-client | — | direct |
| Maven | org.kiwiproject:consul-client | 0.9.0 | direct |
| Maven | org.postgresql:postgresql | — | direct |
| Maven | org.postgresql:postgresql | 42.7.11 | direct |
| Maven | org.projectlombok:lombok | 1.18.40 | direct |
| Maven | org.slf4j:jcl-over-slf4j | — | direct |
| Maven | org.slf4j:jcl-over-slf4j | 1.7.30 | direct |
| Maven | org.slf4j:log4j-over-slf4j | — | direct |
| Maven | org.slf4j:log4j-over-slf4j | 1.7.30 | direct |
| Maven | org.slf4j:slf4j-api | — | direct |
| Maven | org.slf4j:slf4j-api | 1.7.30 | direct |
| Maven | org.yaml:snakeyaml | — | direct |
| Maven | org.yaml:snakeyaml | 2.0 | direct |
| Maven | tools.profiler:async-profiler-converter | — | direct |
| Maven | tools.profiler:async-profiler-converter | 3.0 | direct |
| Go | github.com/apache/skywalking-go | v0.6.1-0.20251023090254-afa75a3cc8c3 | indirect |
| Go | github.com/apache/skywalking-go/toolkit | v0.5.1-0.20250301084827-154de50628e8 | indirect |
| Go | github.com/bytedance/sonic | v1.11.6 | indirect |
| Go | github.com/bytedance/sonic/loader | v0.1.1 | indirect |
| Go | github.com/cloudwego/base64x | v0.1.4 | indirect |
| Go | github.com/cloudwego/iasm | v0.2.0 | indirect |
| Go | github.com/cncf/xds/go | v0.0.0-20251210132809-ee656c7534f5 | indirect |
| Go | github.com/envoyproxy/protoc-gen-validate | v1.3.0 | indirect |
| Go | github.com/gabriel-vasile/mimetype | v1.4.3 | indirect |
| Go | github.com/gin-contrib/sse | v0.1.0 | indirect |
| Go | github.com/gin-gonic/gin | v1.10.0 | indirect |
| Go | github.com/go-playground/locales | v0.14.1 | indirect |
| Go | github.com/go-playground/universal-translator | v0.18.1 | indirect |
| Go | github.com/go-playground/validator/v10 | v10.20.0 | indirect |
| Go | github.com/goccy/go-json | v0.10.2 | indirect |
| Go | github.com/google/uuid | v1.6.0 | indirect |
| Go | github.com/json-iterator/go | v1.1.12 | indirect |
| Go | github.com/klauspost/compress | v1.15.9 | indirect |
| Go | github.com/klauspost/cpuid/v2 | v2.2.7 | indirect |
| Go | github.com/leodido/go-urn | v1.4.0 | indirect |
| Go | github.com/mattn/go-isatty | v0.0.20 | indirect |
| Go | github.com/modern-go/concurrent | v0.0.0-20180306012644-bacd9c7ef1dd | indirect |
| Go | github.com/modern-go/reflect2 | v1.0.2 | indirect |
| Go | github.com/pelletier/go-toml/v2 | v2.2.2 | indirect |
| Go | github.com/pierrec/lz4/v4 | v4.1.15 | indirect |
| Go | github.com/pkg/errors | v0.9.1 | indirect |
| Go | github.com/segmentio/kafka-go | v0.4.43 | indirect |
| Go | github.com/twitchyliquid64/golang-asm | v0.15.1 | indirect |
| Go | github.com/ugorji/go/codec | v1.2.12 | indirect |
| Go | golang.org/x/arch | v0.8.0 | indirect |
| Go | golang.org/x/crypto | v0.51.0 | indirect |
| Go | golang.org/x/net | v0.55.0 | indirect |
| Go | golang.org/x/sys | v0.45.0 | indirect |
| Go | golang.org/x/text | v0.37.0 | indirect |
| Go | google.golang.org/genproto | v0.0.0-20230410155749-daa745c078e1 | indirect |
| Go | google.golang.org/grpc | v1.79.3 | indirect |
| Go | google.golang.org/protobuf | v1.36.10 | indirect |
| Go | gopkg.in/yaml.v3 | v3.0.1 | indirect |
| Maven | build.buf.protoc-gen-validate:pgv-java-stub | — | indirect |
| Maven | build.buf.protoc-gen-validate:protoc-gen-validate | — | indirect |
| Maven | ch.qos.logback:logback-classic | — | indirect |
| Maven | com.caucho:resin | 3.0.9 | indirect |
| Maven | com.caucho:resin | 4.0.41 | indirect |
| Maven | com.h2database:h2 | — | indirect |
| Maven | com.jayway.jsonpath:json-path | 2.9.0 | indirect |
| Maven | com.linecorp.armeria:armeria-graphql | — | indirect |
| Maven | com.linecorp.armeria:armeria-junit5 | — | indirect |
| Maven | com.linecorp.armeria:armeria-protobuf | — | indirect |
| Maven | com.oracle:ojdbc14 | 10.2.0.4.0 | indirect |
| Maven | io.fabric8:istio-client | — | indirect |
| Maven | io.fabric8:kubernetes-httpclient-jdk | — | indirect |
| Maven | io.grpc:grpc-testing | — | indirect |
| Maven | io.netty:netty-codec | — | indirect |
| Maven | io.netty:netty-codec-http | — | indirect |
| Maven | io.netty:netty-codec-http2 | — | indirect |
| Maven | io.netty:netty-handler | — | indirect |
| Maven | io.netty:netty-handler-proxy | — | indirect |
| Maven | io.prometheus:simpleclient_common | 0.6.0 | indirect |
| Maven | io.prometheus:simpleclient_hotspot | 0.6.0 | indirect |
| Maven | javax.annotation:javax.annotation-api | 1.3.2 | indirect |
| Maven | javax.servlet:javax.servlet-api | 3.0.1 | indirect |
| Maven | javax.xml.bind:jaxb-api | — | indirect |
| Maven | kr.motd.maven:os-maven-plugin | — | indirect |
| Maven | kr.motd.maven:os-maven-plugin | 1.5.0 | indirect |
| Maven | kr.motd.maven:os-maven-plugin | 1.6.2 | indirect |
| Maven | net.bytebuddy:byte-buddy | — | indirect |
| Maven | net.bytebuddy:byte-buddy | 1.18.7 | indirect |
| Maven | net.bytebuddy:byte-buddy-agent | 1.18.7 | indirect |
| Maven | org.antlr:antlr4-maven-plugin | — | indirect |
| Maven | org.antlr:antlr4-maven-plugin | 4.11.1 | indirect |
| Maven | org.apache.curator:curator-test | — | indirect |
| Maven | org.apache.curator:curator-test | 5.9.0 | indirect |
| Maven | org.apache.maven.plugin-tools:maven-plugin-annotations | 3.9.0 | indirect |
| Maven | org.apache.maven.plugins:maven-assembly-plugin | 3.6.0 | indirect |
| Maven | org.apache.maven.plugins:maven-checkstyle-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-checkstyle-plugin | 3.1.0 | indirect |
| Maven | org.apache.maven.plugins:maven-compiler-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-compiler-plugin | 3.13.0 | indirect |
| Maven | org.apache.maven.plugins:maven-dependency-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-dependency-plugin | 1.12.0.1 | indirect |
| Maven | org.apache.maven.plugins:maven-deploy-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-enforcer-plugin | 11 | indirect |
| Maven | org.apache.maven.plugins:maven-failsafe-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-gpg-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-gpg-plugin | 3.2.6 | indirect |
| Maven | org.apache.maven.plugins:maven-javadoc-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-resources-plugin | 2.4.3 | indirect |
| Maven | org.apache.maven.plugins:maven-surefire-plugin | — | indirect |
| Maven | org.apache.maven:maven-core | 3.9.0 | indirect |
| Maven | org.apache.skywalking:agent-analyzer | — | indirect |
| Maven | org.apache.skywalking:agent-grpc-provider | — | indirect |
| Maven | org.apache.skywalking:agent-jetty-provider | — | indirect |
| Maven | org.apache.skywalking:alarm-provider | — | indirect |
| Maven | org.apache.skywalking:apm-collector-core | — | indirect |
| Maven | org.apache.skywalking:apm-collector-instrument | — | indirect |
| Maven | org.apache.skywalking:apm-datacarrier | — | indirect |
| Maven | org.apache.skywalking:apm-jdbc-commons | — | indirect |
| Maven | org.apache.skywalking:apm-toolkit-log4j-2.x | — | indirect |
| Maven | org.apache.skywalking:apm-toolkit-logback-1.x | — | indirect |
| Maven | org.apache.skywalking:apm-toolkit-micrometer-registry | 8.2.0 | indirect |
| Maven | org.apache.skywalking:apm-toolkit-trace | — | indirect |
| Maven | org.apache.skywalking:baseline-computing-provider | — | indirect |
| Maven | org.apache.skywalking:collector-cache-caffeine-provider | — | indirect |
| Maven | org.apache.skywalking:collector-cache-guava-provider | — | indirect |
| Maven | org.apache.skywalking:collector-cluster-redis-provider | — | indirect |
| Maven | org.apache.skywalking:collector-cluster-standalone-provider | — | indirect |
| Maven | org.apache.skywalking:collector-cluster-zookeeper-provider | — | indirect |
| Maven | org.apache.skywalking:collector-configuration-provider | — | indirect |
| Maven | org.apache.skywalking:collector-grpc-manager-define | — | indirect |
| Maven | org.apache.skywalking:collector-grpc-manager-provider | — | indirect |
| Maven | org.apache.skywalking:collector-jetty-manager-provider | — | indirect |
| Maven | org.apache.skywalking:collector-naming-jetty-provider | — | indirect |
| Maven | org.apache.skywalking:collector-remote-define | — | indirect |
| Maven | org.apache.skywalking:collector-remote-grpc-provider | — | indirect |
| Maven | org.apache.skywalking:collector-storage-es-provider | — | indirect |
| Maven | org.apache.skywalking:collector-storage-h2-provider | — | indirect |
| Maven | org.apache.skywalking:collector-storage-shardingjdbc-provider | — | indirect |
| Maven | org.apache.skywalking:collector-ui-jetty-provider | — | indirect |
| Maven | org.apache.skywalking:e2e-protocol | 2.0.0 | indirect |
| Maven | org.apache.skywalking:event-analyzer | — | indirect |
| Maven | org.apache.skywalking:fetcher-proto | — | indirect |
| Maven | org.apache.skywalking:gen-ai-analyzer | — | indirect |
| Maven | org.apache.skywalking:jvm-provider | — | indirect |
| Maven | org.apache.skywalking:library-banyandb-client | — | indirect |
| Maven | org.apache.skywalking:library-elasticsearch-client | — | indirect |
| Maven | org.apache.skywalking:library-integration-test | — | indirect |
| Maven | org.apache.skywalking:library-kubernetes-support | — | indirect |
| Maven | org.apache.skywalking:log-analyzer | — | indirect |
| Maven | org.apache.skywalking:meter-analyzer | — | indirect |
| Maven | org.apache.skywalking:metric-provider | — | indirect |
| Maven | org.apache.skywalking:opentelemetry-proto | 2.0.0 | indirect |
| Maven | org.apache.skywalking:receiver-proto | — | indirect |
| Maven | org.apache.skywalking:receiver-zipkin-provider | — | indirect |
| Maven | org.apache.skywalking:register-provider | — | indirect |
| Maven | org.apache.skywalking:segment-parser-provider | — | indirect |
| Maven | org.apache.skywalking:server-health-checker | — | indirect |
| Maven | org.apache.skywalking:skywalking-sharing-server-plugin | — | indirect |
| Maven | org.apache.skywalking:tool-profile-snapshot-bootstrap | — | indirect |
| Maven | org.apache.skywalking:tool-profile-snapshot-server-mock | — | indirect |
| Maven | org.apache.tomcat:annotations-api | — | indirect |
| Maven | org.awaitility:awaitility | — | indirect |
| Maven | org.awaitility:awaitility | 3.0.0 | indirect |
| Maven | org.codehaus.mojo:build-helper-maven-plugin | — | indirect |
| Maven | org.codehaus.mojo:build-helper-maven-plugin | 3.3.0 | indirect |
| Maven | org.codehaus.mojo:exec-maven-plugin | — | indirect |
| Maven | org.codehaus.mojo:exec-maven-plugin | 1.6.0 | indirect |
| Maven | org.codehaus.mojo:flatten-maven-plugin | — | indirect |
| Maven | org.codehaus.mojo:flatten-maven-plugin | 1.6.0 | indirect |
| Maven | org.cyclonedx:cyclonedx-maven-plugin | — | indirect |
| Maven | org.cyclonedx:cyclonedx-maven-plugin | 2.8.0 | indirect |
| Maven | org.glassfish.jaxb:jaxb-runtime | — | indirect |
| Maven | org.junit.jupiter:junit-jupiter | — | indirect |
| Maven | org.junit.jupiter:junit-jupiter-params | — | indirect |
| Maven | org.mockito:mockito-core | — | indirect |
| Maven | org.mockito:mockito-core | 5.11.0 | indirect |
| Maven | org.mockito:mockito-junit-jupiter | — | indirect |
| Maven | org.mockito:mockito-junit-jupiter | 5.11.0 | indirect |
| Maven | org.openjdk.jmh:jmh-core | 1.37 | indirect |
| Maven | org.openjdk.jmh:jmh-generator-annprocess | — | indirect |
| Maven | org.openjdk.jmh:jmh-generator-annprocess | 1.37 | indirect |
| Maven | org.projectlombok:lombok-maven-plugin | 1.18.20.0 | indirect |
| Maven | org.springframework.boot:spring-boot-configuration-processor | — | indirect |
| Maven | org.springframework.boot:spring-boot-dependencies | 2.5.5 | indirect |
| Maven | org.springframework.boot:spring-boot-maven-plugin | — | indirect |
| Maven | org.springframework.boot:spring-boot-starter-actuator | — | indirect |
| Maven | org.springframework.boot:spring-boot-starter-data-jpa | — | indirect |
| Maven | org.springframework.boot:spring-boot-starter-test | — | indirect |
| Maven | org.springframework.boot:spring-boot-starter-web | — | indirect |
| Maven | org.springframework.kafka:spring-kafka-test | — | indirect |
| Maven | org.springframework.kafka:spring-kafka-test | 2.4.6.RELEASE | indirect |
| Maven | org.testcontainers:elasticsearch | — | indirect |
| Maven | org.testcontainers:elasticsearch | 1.17.6 | indirect |
| Maven | org.testcontainers:junit-jupiter | — | indirect |
| Maven | org.testcontainers:junit-jupiter | 1.17.6 | indirect |
| Maven | org.testcontainers:kafka | — | indirect |
| Maven | org.testcontainers:kafka | 1.17.6 | indirect |
| Maven | org.testcontainers:postgresql | — | indirect |
| Maven | org.testcontainers:postgresql | 1.17.6 | indirect |
| Maven | org.testcontainers:testcontainers | — | indirect |
| Maven | org.testcontainers:testcontainers | 1.17.6 | indirect |
| Maven | org.xolstice.maven.plugins:protobuf-maven-plugin | — | indirect |
| Maven | org.xolstice.maven.plugins:protobuf-maven-plugin | 0.5.0 | indirect |
| Maven | org.xolstice.maven.plugins:protobuf-maven-plugin | 0.6.1 | indirect |
| Maven | pl.project13.maven:git-commit-id-plugin | 4.9.10 | indirect |
| Maven | uk.org.webcompere:system-stubs-jupiter | — | indirect |
| Maven | uk.org.webcompere:system-stubs-jupiter | 2.1.4 | indirect |
| PyPI | flask | 3.1.3 | indirect |
| PyPI | grpcio | 1.63.2 | indirect |
| PyPI | opentelemetry-proto | 1.28.0 | indirect |
| PyPI | protobuf | 5.29.6 | indirect |
Installing maven:org.apache.skywalking:mqe-rt@10.1.0 pulls in 91 packages, direct and transitive: 16 carry known advisories, of which 2 are direct dependencies.
| Package | Version | Relation | Severity | Advisories | Fixed in |
|---|---|---|---|---|---|
| org.apache.skywalking:server-core | 10.1.0 | direct | high | 1 | 10.4.0 |
| com.fasterxml.jackson.core:jackson-core | 2.16.0 | indirect | high | 2 | 3.1.4 |
| com.fasterxml.jackson.core:jackson-databind | 2.16.0 | indirect | high | 5 | 3.1.4 |
| io.netty:netty-codec | 4.1.108.Final | indirect | high | 3 | 4.2.16.Final |
| io.netty:netty-codec-dns | 4.1.108.Final | indirect | high | 2 | 4.2.16.Final |
| io.netty:netty-codec-haproxy | 4.1.108.Final | indirect | high | 4 | 4.2.16.Final |
| io.netty:netty-codec-http | 4.1.108.Final | indirect | high | 17 | 4.2.16.Final |
| io.netty:netty-codec-http2 | 4.1.108.Final | indirect | high | 8 | 4.2.16.Final |
| io.netty:netty-handler | 4.1.108.Final | indirect | high | 4 | 4.2.15.Final |
| io.netty:netty-resolver-dns | 4.1.108.Final | indirect | high | 3 | 4.2.15.Final |
| io.netty:netty-common | 4.1.108.Final | indirect | moderate | 2 | 4.1.118.Final |
| io.netty:netty-handler-proxy | 4.1.108.Final | indirect | moderate | 1 | 4.2.13.Final |
| io.netty:netty-transport-native-epoll | 4.1.108.Final | indirect | moderate | 1 | 4.2.15.Final |
| io.netty:netty-transport-native-kqueue | 4.1.108.Final | indirect | moderate | 1 | 4.2.15.Final |
| org.apache.commons:commons-lang3 | 3.12.0 | indirect | moderate | 1 | 3.18.0 |
| org.apache.logging.log4j:log4j-core | 2.17.1 | direct | low | 3 | 2.25.4 |
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Spotted something off in this report, or have thoughts to share? Wrong measurements, missed tooling, ideas, questions — anything is welcome. Every message is read and gets a response.
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.10.0, schema v0.31.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Maven.