Oracle Coherence Community Edition
oracle/coherence holds a health index of 86 out of 100, placing it in the Excellent band. It scores highest on Vitality (92/100) and lowest on Security (46/100). It was last updated 1 day ago. 3 contributors account for most of its recent work.
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 72 is calibrated to 86 on the published index scale (record calibration 2026-08-02).
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Maven | com.oracle.coherence.ce:coherence-cdi | 26.04 | - | 64 | 14 days ago |
| Maven | com.oracle.coherence.ce:coherence-grpc | 26.04 | - | 64 | 14 days ago |
| Maven | com.oracle.coherence.ce:coherence-hnsw | 26.04 | - | 12 | 14 days ago |
| Maven | com.oracle.coherence.ce:coherence-discovery | 26.04 | - | 90 | 14 days ago |
Is the project alive — is code being written and are releases shipping?
| 36/36 | Push recency — last push 1 days ago |
| 22.2/36 | Commit cadence — 32/52 weeks with commits |
| 18/18 | Commit volume — 399 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| commits_last_year | 399 |
| human_commit_share | 1 |
| days_since_last_push | 1 |
| active_weeks_last_year | 32 |
| 27/27 | Ships releases — 89 releases published |
| 36/36 | Release recency — latest release 14 days ago |
| 27/27 | Release cadence — a release every ~23 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
| releases_count | 89 |
| latest_release_tag | 15.1.1-0-4 |
| releases_from_tags | no |
| days_since_latest_release | 14 |
| mean_days_between_releases | 23 |
Does the project have users, downloads, attention, and a welcoming setup for contributors?
| 43.3/60 | Stars — 470 stars |
| 15.8/25 | Forks — 80 forks |
| 8/15 | Watchers — 29 watchers |
| forks | 80 |
| stars | 470 |
| watchers | 29 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (UPL-1.0) |
| 18/18 | CONTRIBUTING guide |
| 13.5/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
| has_readme | yes |
| has_license | yes |
| readme_badges | 3 |
| has_contributing | yes |
| has_issue_template | no |
| has_code_of_conduct | yes |
| readme_badge_services | github.com, shields.io |
| has_pull_request_template | no |
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
| 36/54 | Bus factor — 3 contributor(s) cover half of all commits |
| 17.6/22.5 | Commit distribution — top contributor authored 22% of commits |
| 13.5/13.5 | Contributor breadth — 18 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 8 contributing companies or organizations |
| bus_factor | 3 |
| contributors_sampled | 18 |
| top_contributor_share | 0.217 |
| 36.4/42 | Issue resolution — 87% of issues closed |
| 4.3/30 | PR acceptance — 10/70 decided PRs merged |
| 0/13 | Newcomer PR acceptance — no first-time contributor's PR decided in 30d |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| merged_prs | 10 |
| open_issues | 6 |
| closed_issues | 39 |
| prs_merged_7d | 0 |
| prs_decided_7d | 0 |
| prs_merged_30d | 0 |
| prs_decided_30d | 0 |
| issue_closed_ratio | 0.867 |
| closed_unmerged_prs | 60 |
| first_time_authors_30d | 0 |
| first_time_prs_merged_30d | 0 |
| first_time_prs_decided_30d | 0 |
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 25/25 | Owner reach — 6,030 followers of oracle |
| 25/25 | Track record — 319 public repos, account ~13 yr old |
| followers | 6,030 |
| owner_type | Organization |
| is_verified | no |
| owner_login | oracle |
| public_repos | 319 |
| account_age_days | 4,861 |
| 25/25 | Published & resolvable — 4 package(s) on maven |
| 35/35 | Publish recency — latest publish 14 days ago |
| 20/20 | Version history — 90 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
| packages | com.oracle.coherence.ce:coherence-cdi, com.oracle.coherence.ce:coherence-grpc, com.oracle.coherence.ce:coherence-hnsw, com.oracle.coherence.ce:coherence-discovery |
| ecosystems | maven |
| any_deprecated | no |
| min_days_since_publish | 14 |
Are baseline engineering and documentation practices in place?
| 24/24 | CI workflows — 6 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
| 30/30 | README |
| 0/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://coherence.community |
| 10/10 | Repository description |
| 10/10 | Topics — 14 topics |
| 10/10 | Wiki |
| topics | java, coherence, caching, in-memory, clustering, distributed, data-grid, scalability, microservices, polyglot, cloud, imdg, kv-store, hpc |
| has_wiki | yes |
| homepage | https://coherence.community |
| docs_site | https://coherence.community |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
| 0/7.5 | Binary-Artifacts — binaries present in source code |
| 2.2/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 8 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — no SAST tool detected |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 19 existing vulnerabilities detected |
| source | openssf_scorecard |
| checks_evaluated | 15 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 3 |
| scorecard_aggregate | 3.3 |
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 25/25 | Indirect dependencies free of known advisories — no indirect dependency carries a known advisory |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 7 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 20.8/40 | Legible commit history — 39 of 100 human commits state their intent (structured subject or explanatory body) |
| has_llms_txt | no |
| llms_txt_url | — |
| legible_history_share | 0.39 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
| 18/18 | One-command bootstrap — prj/Makefile |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — Java (statically typed) |
| 10/10 | Reproducible environment — Dockerfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | yes |
| typed_language | yes |
| bootstrap_files | prj/Makefile |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | prj/coherence-bedrock/coherence-bedrock-testing-support/pom.xml, prj/coherence-bedrock/coherence-bedrock-tests-junit4/pom.xml, prj/coherence-bedrock/coherence-bedrock-tests-junit5/pom.xml, prj/coherence-bedrock/coherence-bedrock/pom.xml, prj/coherence-bedrock/pom.xml, prj/coherence-bom/pom.xml, prj/coherence-cdi-server/pom.xml, prj/coherence-cdi/pom.xml, prj/coherence-concurrent/pom.xml, prj/coherence-core-21/pom.xml, prj/coherence-core-24/pom.xml, prj/coherence-core-components/pom.xml, prj/coherence-core/pom.xml, prj/coherence-dependencies/pom.xml, prj/coherence-discovery/pom.xml, prj/coherence-docker/pom.xml, prj/coherence-grpc-client-common/pom.xml, prj/coherence-grpc-proxy-common/pom.xml, prj/coherence-grpc-proxy-helidon/pom.xml, prj/coherence-grpc-proxy/pom.xml, prj/coherence-grpc/pom.xml, prj/coherence-hnsw/pom.xml, prj/coherence-http-netty/pom.xml, prj/coherence-java-client/pom.xml, prj/coherence-javadoc/pom.xml, prj/coherence-jcache/pom.xml, prj/coherence-jpa/pom.xml, prj/coherence-json/pom.xml, prj/coherence-loadbalancer/pom.xml, prj/coherence-login/pom.xml, prj/coherence-lucene/pom.xml, prj/coherence-management/pom.xml, prj/coherence-micrometer/pom.xml, prj/coherence-mock/pom.xml, prj/coherence-mp/config/pom.xml, prj/coherence-mp/health/pom.xml, prj/coherence-mp/metrics/pom.xml, prj/coherence-mp/pom.xml, prj/coherence-native/pom.xml, prj/coherence-protobuf/pom.xml, prj/coherence-rag-parent/coherence-rag/pom.xml, prj/coherence-rag-parent/loaders/coherence-rag-aws-s3-loader/pom.xml, prj/coherence-rag-parent/loaders/coherence-rag-azure-blob-storage-loader/pom.xml, prj/coherence-rag-parent/loaders/coherence-rag-google-cloud-storage-loader/pom.xml, prj/coherence-rag-parent/loaders/coherence-rag-oci-object-storage-loader/pom.xml, prj/coherence-rag-parent/loaders/pom.xml, prj/coherence-rag-parent/models/coherence-rag-anthropic/pom.xml, prj/coherence-rag-parent/models/coherence-rag-deepseek/pom.xml, prj/coherence-rag-parent/models/coherence-rag-oci/pom.xml, prj/coherence-rag-parent/models/coherence-rag-ollama/pom.xml, prj/coherence-rag-parent/models/coherence-rag-openai/pom.xml, prj/coherence-rag-parent/models/pom.xml, prj/coherence-rag-parent/pom.xml, prj/coherence-rest/pom.xml, prj/coherence-testing-data/pom.xml, prj/coherence-testing-support/pom.xml, prj/coherence-tracing/opentelemetry/pom.xml, prj/coherence-tracing/pom.xml, prj/coherence-vector-util/pom.xml, prj/coherence/pom.xml, prj/coverage/pom.xml, prj/docs/pom.xml, prj/examples/build.gradle, prj/examples/guides/050-bootstrap/build.gradle, prj/examples/guides/050-bootstrap/pom.xml, prj/examples/guides/070-coherence-extend/build.gradle, prj/examples/guides/070-coherence-extend/pom.xml, prj/examples/guides/090-health-checks/build.gradle, prj/examples/guides/090-health-checks/pom.xml, prj/examples/guides/100-put-get-remove/build.gradle, prj/examples/guides/100-put-get-remove/pom.xml, prj/examples/guides/110-queries/build.gradle, prj/examples/guides/110-queries/pom.xml, prj/examples/guides/120-built-in-aggregators/build.gradle, prj/examples/guides/120-built-in-aggregators/pom.xml, prj/examples/guides/121-custom-aggregators/build.gradle, prj/examples/guides/121-custom-aggregators/pom.xml, prj/examples/guides/124-views/build.gradle, prj/examples/guides/124-views/pom.xml, prj/examples/guides/125-streams/build.gradle, prj/examples/guides/125-streams/pom.xml, prj/examples/guides/128-entry-processors/build.gradle, prj/examples/guides/128-entry-processors/pom.xml, prj/examples/guides/130-near-caching/build.gradle, prj/examples/guides/130-near-caching/pom.xml, prj/examples/guides/140-client-events/build.gradle, prj/examples/guides/140-client-events/pom.xml, prj/examples/guides/142-server-events/build.gradle, prj/examples/guides/142-server-events/pom.xml, prj/examples/guides/190-cache-stores/build.gradle, prj/examples/guides/190-cache-stores/pom.xml, prj/examples/guides/195-bulk-loading-caches/build.gradle, prj/examples/guides/195-bulk-loading-caches/pom.xml, prj/examples/guides/200-federation/build.gradle, prj/examples/guides/200-federation/pom.xml, prj/examples/guides/210-ssl/build.gradle, prj/examples/guides/210-ssl/pom.xml, prj/examples/guides/220-performance/build.gradle, prj/examples/guides/220-performance/pom.xml, prj/examples/guides/300-vector-store/build.gradle, prj/examples/guides/300-vector-store/pom.xml, prj/examples/guides/460-topics/build.gradle, prj/examples/guides/460-topics/pom.xml, prj/examples/guides/510-executor/build.gradle, prj/examples/guides/510-executor/pom.xml, prj/examples/guides/600-response-caching/build.gradle, prj/examples/guides/600-response-caching/pom.xml, prj/examples/guides/810-custom-access-controller/build.gradle, prj/examples/guides/810-custom-access-controller/pom.xml, prj/examples/guides/905-key-association/build.gradle, prj/examples/guides/905-key-association/pom.xml, prj/examples/guides/906-partition-level-transactions/build.gradle, prj/examples/guides/906-partition-level-transactions/pom.xml, prj/examples/guides/910-multi-cluster-client/multi-cluster-client/build.gradle, prj/examples/guides/910-multi-cluster-client/multi-cluster-client/pom.xml, prj/examples/guides/910-multi-cluster-client/multi-cluster-server/build.gradle, prj/examples/guides/910-multi-cluster-client/multi-cluster-server/pom.xml, prj/examples/guides/910-multi-cluster-client/pom.xml, prj/examples/internal/template/build.gradle, prj/examples/internal/template/pom.xml, prj/examples/pom.xml, prj/examples/tutorials/200-persistence/build.gradle, prj/examples/tutorials/200-persistence/pom.xml, prj/examples/tutorials/210-archiver/build.gradle, prj/examples/tutorials/210-archiver/pom.xml, prj/examples/tutorials/500-graphql/complete/build.gradle, prj/examples/tutorials/500-graphql/complete/pom.xml, prj/examples/tutorials/500-graphql/initial/build.gradle, prj/examples/tutorials/500-graphql/initial/pom.xml, prj/plugins/gradle/build.gradle, prj/plugins/gradle/pom.xml, prj/plugins/gradle/src/test/resources/test-projects/test-multi-project/app/build.gradle, prj/plugins/gradle/src/test/resources/test-projects/test-multi-project/core/build.gradle, prj/plugins/maven/pof-maven-plugin-tests/pom.xml, prj/plugins/maven/pof-maven-plugin/pom.xml, prj/plugins/maven/pom.xml, prj/plugins/maven/security-config-maven-plugin-tests/pom.xml, prj/plugins/maven/security-config-maven-plugin/pom.xml, prj/plugins/maven/security-config-shade-transformer/pom.xml, prj/plugins/pom.xml, prj/pom.xml, prj/test/distribution/build-artifacts/pom.xml, prj/test/distribution/federation-compatibility/federation-15.1.1.0/pom.xml, prj/test/distribution/federation-compatibility/pom.xml, prj/test/distribution/grpc-compatibility/grpc-ce-22.06/pom.xml, prj/test/distribution/grpc-compatibility/grpc-ce-latest/pom.xml, prj/test/distribution/grpc-compatibility/grpc-ce-main/pom.xml, prj/test/distribution/grpc-compatibility/grpc-compatibility-core/pom.xml, prj/test/distribution/grpc-compatibility/pom.xml, prj/test/distribution/jcache-compliance/pom.xml, prj/test/distribution/osgi/pom.xml, prj/test/distribution/pom.xml, prj/test/distribution/topics-compatibility/pom.xml, prj/test/distribution/topics-compatibility/topics-14.1.1.2206.3/pom.xml, prj/test/endurance/pom.xml, prj/test/functional/aggregator/pom.xml, prj/test/functional/ai/pom.xml, prj/test/functional/bootstrap/pom.xml, prj/test/functional/bundler/pom.xml, prj/test/functional/cache/pom.xml, prj/test/functional/cdi-server/pom.xml, prj/test/functional/cdi/pom.xml, prj/test/functional/concurrent-cdi/pom.xml, prj/test/functional/concurrent/pom.xml, prj/test/functional/config/pom.xml, prj/test/functional/core/pom.xml, prj/test/functional/dependencies/pom.xml, prj/test/functional/discovery/pom.xml, prj/test/functional/dslquery/pom.xml, prj/test/functional/events/pom.xml, prj/test/functional/examples/pom.xml, prj/test/functional/executor/pom.xml, prj/test/functional/extend/pom.xml, prj/test/functional/extractor/pom.xml, prj/test/functional/filter/pom.xml, prj/test/functional/graal/pom.xml, prj/test/functional/grpc-client-netty-21/pom.xml, prj/test/functional/grpc-client-netty/pom.xml, prj/test/functional/grpc-client-tck-21/pom.xml, prj/test/functional/grpc-client-tck/pom.xml, prj/test/functional/grpc-proxy-helidon/pom.xml, prj/test/functional/grpc-proxy-netty-21/pom.xml, prj/test/functional/grpc-proxy-netty/pom.xml, prj/test/functional/grpc-proxy-tck-21/pom.xml, prj/test/functional/grpc-proxy-tck/pom.xml, prj/test/functional/grpc/pom.xml, prj/test/functional/guardian/pom.xml, prj/test/functional/health/pom.xml, prj/test/functional/hnsw-index/pom.xml, prj/test/functional/http-config/pom.xml, prj/test/functional/http-netty/pom.xml, prj/test/functional/http/pom.xml, prj/test/functional/io/pom.xml, prj/test/functional/jcache/pom.xml, prj/test/functional/jmx/pom.xml, prj/test/functional/jpa/pom.xml, prj/test/functional/lambda/pom.xml, prj/test/functional/logging/pom.xml, prj/test/functional/management/pom.xml, prj/test/functional/memcached/pom.xml, prj/test/functional/metrics/pom.xml, prj/test/functional/micrometer/pom.xml, prj/test/functional/mp-config/pom.xml, prj/test/functional/mp-health/pom.xml, prj/test/functional/mp-metrics/pom.xml, prj/test/functional/near/pom.xml, prj/test/functional/net/pom.xml, prj/test/functional/partition/pom.xml, prj/test/functional/persistence/pom.xml, prj/test/functional/pom.xml, prj/test/functional/processor/pom.xml, prj/test/functional/protobuf/pom.xml, prj/test/functional/queues/pom.xml, prj/test/functional/quorum/pom.xml, prj/test/functional/reporter/pom.xml, prj/test/functional/repository/pom.xml, prj/test/functional/rest-netty/pom.xml, prj/test/functional/rest/pom.xml, prj/test/functional/rwbm/pom.xml, prj/test/functional/security/pom.xml, prj/test/functional/session/pom.xml, prj/test/functional/ssl/pom.xml, prj/test/functional/tcmp/pom.xml, prj/test/functional/topics/pom.xml, prj/test/functional/tracing/clean/pom.xml, prj/test/functional/tracing/common/pom.xml, prj/test/functional/tracing/opentelemetry/core/pom.xml, prj/test/functional/tracing/opentelemetry/grpc/pom.xml, prj/test/functional/tracing/opentelemetry/pom.xml, prj/test/functional/tracing/pom.xml, prj/test/functional/transformer/pom.xml, prj/test/functional/trigger/pom.xml, prj/test/functional/util/pom.xml, prj/test/functional/wls-management/pom.xml, prj/test/functional/xsd/pom.xml, prj/test/performance/benchmarks/pom.xml, prj/test/performance/framework/pom.xml, prj/test/performance/pom.xml, prj/test/performance/psr/pom.xml, prj/test/unit/coherence-core-tests/pom.xml, prj/test/unit/coherence-tests/pom.xml, prj/test/unit/pom.xml |
| dependency_bot_commit_share | 0 |
| 45/45 | Type-checkable code — Java (statically typed) |
| 53.8/55 | Manageable file sizes — 150/6,803 source files over 60KB |
| primary_language | Java |
| largest_source_bytes | 1,851,335 |
| source_files_sampled | 6,803 |
| oversized_source_files | 150 |
| 40/40 | API schema (OpenAPI/GraphQL/proto) — prj/coherence-grpc/src/main/proto/cache_service_messages_v1.proto, prj/coherence-grpc/src/main/proto/common_messages_v1.proto, prj/coherence-grpc/src/main/proto/messages.proto, prj/coherence-grpc/src/main/proto/proxy_service_messages_v1.proto, prj/coherence-grpc/src/main/proto/proxy_service_v1.proto, prj/coherence-grpc/src/main/proto/queue_service_messages_v1.proto, prj/coherence-grpc/src/main/proto/services.proto, prj/coherence-grpc/src/main/proto/topic_service_messages_v1.proto, prj/coherence-rag-parent/coherence-rag/src/main/resources/META-INF/openapi.yaml, prj/test/functional/grpc-proxy-tck/src/main/proto/route_guide.proto |
| 0/20 | MCP server — not applicable to this kind of software |
| 40/40 | Runnable examples — examples |
| example_dirs | examples |
| has_mcp_signal | no |
| api_schema_files | prj/coherence-grpc/src/main/proto/cache_service_messages_v1.proto, prj/coherence-grpc/src/main/proto/common_messages_v1.proto, prj/coherence-grpc/src/main/proto/messages.proto, prj/coherence-grpc/src/main/proto/proxy_service_messages_v1.proto, prj/coherence-grpc/src/main/proto/proxy_service_v1.proto, prj/coherence-grpc/src/main/proto/queue_service_messages_v1.proto, prj/coherence-grpc/src/main/proto/services.proto, prj/coherence-grpc/src/main/proto/topic_service_messages_v1.proto, prj/coherence-rag-parent/coherence-rag/src/main/resources/META-INF/openapi.yaml, prj/test/functional/grpc-proxy-tck/src/main/proto/route_guide.proto |
| interfaces_expected_of | — |
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Each point covers 6 days.
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 0 | Binary-Artifacts | binaries present in source code |
| 3 | Branch-Protection | branch protection is not maximal on development and all release branches |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 8 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| n/a | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | no SAST tool detected |
| 10 | Security-Policy | security policy file detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 19 existing vulnerabilities detected |
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Maven | ${coherence.group.id}:coherence | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-cdi | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-concurrent | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-cdi-server | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-discovery | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-grpc | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-grpc-proxy-common | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-grpc-proxy-helidon | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-grpc-proxy | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-grpc-client-common | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-hnsw | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-http-netty | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-java-client | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-jcache | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-jpa | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-json | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-login | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-lucene | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-management | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-micrometer | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-mp-config | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-mp-health | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-mp-metrics | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-protobuf | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-rag | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-rag-aws-s3-loader | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-rag-azure-blob-storage-loader | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-rag-google-cloud-storage-loader | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-rag-oci-object-storage-loader | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-rag-deepseek | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-rag-oci | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-rag-ollama | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-rag-openai | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-rest | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-bedrock | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:coherence-bedrock-testing-support | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:pof-maven-plugin | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${coherence.group.id}:${coherence.group.id}.gradle.plugin | ${project.version} | prj/coherence-bom/pom.xml |
| Maven | ${project.groupId}:coherence-cdi | ${project.version} | prj/coherence-cdi-server/pom.xml |
| Maven | ${coherence.group.id}:coherence | ${project.version} | prj/coherence-cdi/pom.xml |
| Maven | ${coherence.group.id}:coherence | ${project.version} | prj/coherence-concurrent/pom.xml |
| Maven | jakarta.resource:jakarta.resource-api | — | prj/coherence-core-components/pom.xml |
| Maven | ${coherence.group.id}:coherence-discovery | ${project.version} | prj/coherence-core/pom.xml |
| Maven | ${coherence.group.id}:coherence-vector-util | ${project.version} | prj/coherence-core/pom.xml |
| Maven | it.unimi.dsi:fastutil-core | — | prj/coherence-core/pom.xml |
| Maven | io.github.classgraph:classgraph | — | prj/coherence-core/pom.xml |
| Maven | jakarta.enterprise:jakarta.enterprise.cdi-api | — | prj/coherence-core/pom.xml |
| Maven | jakarta.inject:jakarta.inject-api | — | prj/coherence-core/pom.xml |
| Maven | jakarta.json.bind:jakarta.json.bind-api | — | prj/coherence-core/pom.xml |
| Maven | jakarta.json:jakarta.json-api | — | prj/coherence-core/pom.xml |
| Maven | jakarta.xml.bind:jakarta.xml.bind-api | — | prj/coherence-core/pom.xml |
| Maven | jakarta.resource:jakarta.resource-api | — | prj/coherence-core/pom.xml |
| Maven | jakarta.ws.rs:jakarta.ws.rs-api | — | prj/coherence-core/pom.xml |
| Maven | com.github.ben-manes.caffeine:caffeine | — | prj/coherence-core/pom.xml |
| Maven | org.glassfish.jersey.core:jersey-server | — | prj/coherence-core/pom.xml |
| Maven | org.glassfish.jersey.inject:jersey-hk2 | — | prj/coherence-core/pom.xml |
| Maven | org.ow2.asm:asm | ${asm.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.ow2.asm:asm-analysis | ${asm.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.ow2.asm:asm-commons | ${asm.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.ow2.asm:asm-tree | ${asm.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.ow2.asm:asm-util | ${asm.version} | prj/coherence-dependencies/pom.xml |
| Maven | com.sleepycat:je | ${bdb.version} | prj/coherence-dependencies/pom.xml |
| Maven | biz.aQute.bnd:biz.aQute.bndlib | ${bnd.version} | prj/coherence-dependencies/pom.xml |
| Maven | io.github.classgraph:classgraph | ${classgraph.version} | prj/coherence-dependencies/pom.xml |
| Maven | io.opentelemetry:opentelemetry-bom | ${opentelemetry.version} | prj/coherence-dependencies/pom.xml |
| Maven | io.opentelemetry.instrumentation:opentelemetry-grpc-1.6 | ${opentelemetry.grpc.version} | prj/coherence-dependencies/pom.xml |
| Maven | io.opentelemetry.proto:opentelemetry-proto | ${opentelemetry.proto.version} | prj/coherence-dependencies/pom.xml |
| Maven | com.squareup.okhttp3:okhttp-jvm | ${ok.http.version} | prj/coherence-dependencies/pom.xml |
| Maven | io.jhdf:jhdf | ${jhdf.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.eclipse.persistence:eclipselink | ${eclipselink.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.eclipse.persistence:jakarta.persistence.jakarta.persistence-api | ${eclipselink.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.eclipse.microprofile.config:microprofile-config-api | ${eclipse.mp.config.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.eclipse.microprofile.health:microprofile-health-api | ${eclipse.mp.health.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.eclipse.microprofile.metrics:microprofile-metrics-api | ${eclipse.mp.metrics.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.apache.felix:org.apache.felix.main | ${felix.version} | prj/coherence-dependencies/pom.xml |
| Maven | it.unimi.dsi:fastutil-core | ${fastutil.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.graalvm.polyglot:polyglot | ${graalvm.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.graalvm.js:js-language | ${graalvm.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.graalvm.polyglot:js | ${graalvm.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.graalvm.sdk:graal-sdk | ${graalvm.version} | prj/coherence-dependencies/pom.xml |
| Maven | io.helidon:helidon-bom | ${helidon.version} | prj/coherence-dependencies/pom.xml |
| Maven | com.google.code.gson:gson | ${gson.version} | prj/coherence-dependencies/pom.xml |
| Maven | io.projectreactor.netty:reactor-netty-http | ${projectreactor.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.hsqldb:hsqldb | ${hsqldb.version} | prj/coherence-dependencies/pom.xml |
| Maven | com.fasterxml.jackson.core:jackson-annotations | ${jackson.annotations.version} | prj/coherence-dependencies/pom.xml |
| Maven | com.fasterxml.jackson.core:jackson-core | ${jackson.version} | prj/coherence-dependencies/pom.xml |
| Maven | com.fasterxml.jackson.core:jackson-databind | ${jackson.databind.version} | prj/coherence-dependencies/pom.xml |
| Maven | com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-base | ${jackson.version} | prj/coherence-dependencies/pom.xml |
| Maven | com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-json-provider | ${jackson.version} | prj/coherence-dependencies/pom.xml |
| Maven | com.fasterxml.jackson.module:jackson-module-jakarta-xmlbind-annotations | ${jackson.version} | prj/coherence-dependencies/pom.xml |
| Maven | jakarta.servlet:jakarta.servlet-api | ${jakarta.servlet.ee9.version} | prj/coherence-dependencies/pom.xml |
| Maven | jakarta.servlet.jsp:jakarta.servlet.jsp-api | ${jakarta.servlet.jsp.ee9.version} | prj/coherence-dependencies/pom.xml |
| Maven | jakarta.resource:jakarta.resource-api | ${jakarta.resource.version} | prj/coherence-dependencies/pom.xml |
| Maven | jakarta.mail:jakarta.mail-api | ${jakarta.mail.version} | prj/coherence-dependencies/pom.xml |
| Maven | jakarta.persistence:jakarta.persistence-api | ${jakarta.persistence.version} | prj/coherence-dependencies/pom.xml |
| Maven | jakarta.interceptor:jakarta.interceptor-api | ${jakarta.interceptor.version} | prj/coherence-dependencies/pom.xml |
| Maven | javax.cache:cache-api | ${javax.cache.version} | prj/coherence-dependencies/pom.xml |
| Maven | jakarta.ws.rs:jakarta.ws.rs-api | ${jakarta.ws.rs.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.glassfish.jersey:jersey-bom | ${jersey.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.codehaus.jettison:jettison | ${jettison.version} | prj/coherence-dependencies/pom.xml |
| Maven | jakarta.inject:jakarta.inject-api | ${jakarta.inject.version} | prj/coherence-dependencies/pom.xml |
| Maven | io.smallrye:jandex | ${jandex.version} | prj/coherence-dependencies/pom.xml |
| Maven | jakarta.json.bind:jakarta.json.bind-api | ${jakarta.json.bind.version} | prj/coherence-dependencies/pom.xml |
| Maven | jakarta.json:jakarta.json-api | ${jakarta.json.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.glassfish:jakarta.json | ${jakarta.json.impl.version} | prj/coherence-dependencies/pom.xml |
| Maven | net.java.dev.jna:jna | ${jna.version} | prj/coherence-dependencies/pom.xml |
| Maven | dev.langchain4j:langchain4j-bom | ${langchain4j.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.apache.tika:tika-bom | ${tika.version} | prj/coherence-dependencies/pom.xml |
| Maven | com.github.junrar:junrar | ${junrar.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.apache.logging.log4j:log4j-api | ${log4j2.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.apache.logging.log4j:log4j-core | ${log4j2.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.apache.logging.log4j:log4j-to-slf4j | ${log4j2.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.apache.httpcomponents.client5:httpclient5 | ${httpclient5.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.apache.lucene:lucene-core | ${lucene.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.apache.lucene:lucene-analysis-common | ${lucene.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.apache.lucene:lucene-queryparser | ${lucene.version} | prj/coherence-dependencies/pom.xml |
| Maven | io.netty:netty-bom | ${netty.version} | prj/coherence-dependencies/pom.xml |
| Maven | com.oracle.oci.sdk:oci-java-sdk-bom | ${oci.sdk.version} | prj/coherence-dependencies/pom.xml |
| Maven | com.microsoft.onnxruntime:onnxruntime | ${onnx.version} | prj/coherence-dependencies/pom.xml |
| Maven | com.microsoft.onnxruntime:onnxruntime_gpu | ${onnx.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.slf4j:slf4j-api | ${slf4j.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.slf4j:slf4j-debug | ${slf4j.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.slf4j:slf4j-jdk14 | ${slf4j.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.slf4j:slf4j-simple | ${slf4j.version} | prj/coherence-dependencies/pom.xml |
| Maven | net.spy:spymemcached | ${spymemcached.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.testcontainers:testcontainers | ${testcontainers.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.testcontainers:junit-jupiter | ${testcontainers.version} | prj/coherence-dependencies/pom.xml |
| Maven | jakarta.annotation:jakarta.annotation-api | ${jakarta.annotation.version} | prj/coherence-dependencies/pom.xml |
| Maven | jakarta.enterprise:jakarta.enterprise.cdi-api | ${jakarta.enterprise.cdi.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.jboss.weld.se:weld-se-core | ${weld.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.jboss.weld:weld-junit5 | ${weld-junit.version} | prj/coherence-dependencies/pom.xml |
| Maven | io.reactivex.rxjava3:rxjava | ${rxjava.version} | prj/coherence-dependencies/pom.xml |
| Maven | com.google.protobuf:protobuf-bom | ${protobuf.version} | prj/coherence-dependencies/pom.xml |
| Maven | com.github.ben-manes.caffeine:caffeine | ${caffeine.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.junit:junit-bom | ${junit.jupiter.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.jacoco:org.jacoco.agent | ${jacoco.version} | prj/coherence-dependencies/pom.xml |
| Maven | com.google.guava:guava-testlib | ${guava.testlib.version} | prj/coherence-dependencies/pom.xml |
| Maven | com.oracle.bedrock:bedrock-bom | ${oracle.bedrock.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.openjdk.jol:jol-core | ${jol.version} | prj/coherence-dependencies/pom.xml |
| Maven | junit:junit | ${junit.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.hamcrest:hamcrest | ${hamcrest-2.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.hamcrest:hamcrest-core | ${hamcrest-2.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.hamcrest:hamcrest-all | ${hamcrest.version} | prj/coherence-dependencies/pom.xml |
| Maven | net.bytebuddy:byte-buddy | ${bytebuddy.version} | prj/coherence-dependencies/pom.xml |
| Maven | net.bytebuddy:byte-buddy-agent | ${bytebuddy.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.mockito:mockito-core | ${mockito.version} | prj/coherence-dependencies/pom.xml |
| Maven | jakarta.activation:jakarta.activation-api | ${jakarta.activation.version} | prj/coherence-dependencies/pom.xml |
| Maven | com.sun.xml.bind:jaxb-core | ${jaxb-core.version} | prj/coherence-dependencies/pom.xml |
| Maven | com.sun.xml.bind:jaxb-impl | ${jaxb-impl.version} | prj/coherence-dependencies/pom.xml |
| Maven | com.sun.xml.bind:jaxb-xjc | ${jaxb-impl.version} | prj/coherence-dependencies/pom.xml |
| Maven | jakarta.xml.bind:jakarta.xml.bind-api | ${jakarta.xml.bind.version} | prj/coherence-dependencies/pom.xml |
| Maven | io.grpc:grpc-bom | ${grpc.version} | prj/coherence-dependencies/pom.xml |
| Maven | com.google.errorprone:error_prone_annotations | ${google-error-prone.version} | prj/coherence-dependencies/pom.xml |
| Maven | io.micrometer:micrometer-core | ${micrometer.version} | prj/coherence-dependencies/pom.xml |
| Maven | io.micrometer:micrometer-registry-prometheus | ${micrometer.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.eclipse.parsson:parsson-media | ${parsson-media.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.wiremock:wiremock | ${wiremock.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.apache.groovy:groovy | ${groovy.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.apache.groovy:groovy-ant | ${groovy.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.ow2.asm:asm | ${asm.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.asciidoctor:asciidoctorj-diagram | ${asciidoctor.diagram.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.ow2.asm:asm | ${asm.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.ow2.asm:asm-commons | ${asm.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.ow2.asm:asm | ${asm.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.junit.jupiter:junit-jupiter | ${junit.jupiter.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.junit.jupiter:junit-jupiter-engine | ${junit.jupiter.version} | prj/coherence-dependencies/pom.xml |
| Maven | org.junit.vintage:junit-vintage-engine | ${junit.jupiter.version} | prj/coherence-dependencies/pom.xml |
| Maven | ${coherence.group.id}:coherence | — | prj/coherence-docker/pom.xml |
| Maven | ${coherence.group.id}:coherence-concurrent | — | prj/coherence-docker/pom.xml |
| Maven | ${coherence.group.id}:coherence-hnsw | — | prj/coherence-docker/pom.xml |
| Maven | ${coherence.group.id}:coherence-grpc-proxy | — | prj/coherence-docker/pom.xml |
| Maven | ${coherence.group.id}:coherence-json | — | prj/coherence-docker/pom.xml |
| Maven | org.glassfish:jakarta.json | — | prj/coherence-docker/pom.xml |
| Maven | io.opentelemetry:opentelemetry-sdk-extension-autoconfigure | — | prj/coherence-docker/pom.xml |
| Maven | io.opentelemetry:opentelemetry-exporter-otlp | — | prj/coherence-docker/pom.xml |
| Maven | com.squareup.okhttp3:okhttp-jvm | — | prj/coherence-docker/pom.xml |
| Maven | org.slf4j:slf4j-simple | — | prj/coherence-docker/pom.xml |
| Maven | org.graalvm.polyglot:polyglot | — | prj/coherence-docker/pom.xml |
| Maven | org.graalvm.polyglot:js | — | prj/coherence-docker/pom.xml |
| Maven | ${coherence.group.id}:coherence | ${project.version} | prj/coherence-grpc-client-common/pom.xml |
| Maven | ${coherence.group.id}:coherence-grpc | ${project.version} | prj/coherence-grpc-client-common/pom.xml |
| Maven | com.google.protobuf:protobuf-java | — | prj/coherence-grpc-client-common/pom.xml |
| Maven | ${coherence.group.id}:coherence-grpc | ${project.version} | prj/coherence-grpc-proxy-common/pom.xml |
| Maven | io.grpc:grpc-services | — | prj/coherence-grpc-proxy-common/pom.xml |
| Maven | io.grpc:grpc-inprocess | — | prj/coherence-grpc-proxy-common/pom.xml |
| Maven | io.helidon:helidon-bom | ${helidon.version.4} | prj/coherence-grpc-proxy-helidon/pom.xml |
| Maven | ${coherence.group.id}:coherence-grpc-proxy-common | ${project.version} | prj/coherence-grpc-proxy-helidon/pom.xml |
| Maven | io.helidon.webserver:helidon-webserver-grpc | — | prj/coherence-grpc-proxy-helidon/pom.xml |
| Maven | ${coherence.group.id}:coherence-grpc-proxy-common | ${project.version} | prj/coherence-grpc-proxy/pom.xml |
| Maven | io.netty:netty-codec-http2 | — | prj/coherence-grpc-proxy/pom.xml |
| Maven | io.netty:netty-handler-proxy | — | prj/coherence-grpc-proxy/pom.xml |
| Maven | io.netty:netty-transport-native-unix-common | — | prj/coherence-grpc-proxy/pom.xml |
| Maven | io.grpc:grpc-netty | — | prj/coherence-grpc-proxy/pom.xml |
| Maven | ${coherence.group.id}:coherence | ${project.version} | prj/coherence-grpc/pom.xml |
| Maven | ${coherence.group.id}:coherence-protobuf | ${project.version} | prj/coherence-grpc/pom.xml |
| Maven | io.grpc:grpc-api | — | prj/coherence-grpc/pom.xml |
| Maven | io.grpc:grpc-core | — | prj/coherence-grpc/pom.xml |
| Maven | com.google.code.gson:gson | — | prj/coherence-grpc/pom.xml |
| Maven | io.grpc:grpc-stub | — | prj/coherence-grpc/pom.xml |
| Maven | io.grpc:grpc-protobuf | — | prj/coherence-grpc/pom.xml |
| Maven | io.opentelemetry.instrumentation:opentelemetry-grpc-1.6 | — | prj/coherence-grpc/pom.xml |
| Maven | jakarta.annotation:jakarta.annotation-api | — | prj/coherence-grpc/pom.xml |
| Maven | jakarta.inject:jakarta.inject-api | — | prj/coherence-grpc/pom.xml |
| Maven | com.google.protobuf:protobuf-java-util | — | prj/coherence-grpc/pom.xml |
| Maven | ${coherence.group.id}:coherence | ${project.version} | prj/coherence-hnsw/pom.xml |
| Maven | net.java.dev.jna:jna | — | prj/coherence-hnsw/pom.xml |
| Maven | it.unimi.dsi:fastutil-core | — | prj/coherence-hnsw/pom.xml |
| Maven | jakarta.json.bind:jakarta.json.bind-api | — | prj/coherence-hnsw/pom.xml |
| Maven | jakarta.json:jakarta.json-api | — | prj/coherence-hnsw/pom.xml |
| Maven | ${coherence.group.id}:coherence | ${project.version} | prj/coherence-http-netty/pom.xml |
| Maven | io.netty:netty-codec-http | — | prj/coherence-http-netty/pom.xml |
| Maven | ${coherence.group.id}:coherence-grpc-client-common | — | prj/coherence-java-client/pom.xml |
| Maven | io.netty:netty-codec-http2 | — | prj/coherence-java-client/pom.xml |
| Maven | io.netty:netty-handler-proxy | — | prj/coherence-java-client/pom.xml |
| Maven | io.netty:netty-transport-native-unix-common | — | prj/coherence-java-client/pom.xml |
| Maven | io.grpc:grpc-netty | — | prj/coherence-java-client/pom.xml |
Full resolved dependency set from the GitHub dependency graph: 212 direct and 225 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Maven | biz.aQute.bnd:biz.aQute.bndlib | — | direct |
| Maven | biz.aQute.bnd:biz.aQute.bndlib | 7.1.0 | direct |
| Maven | com.fasterxml.jackson.core:jackson-annotations | — | direct |
| Maven | com.fasterxml.jackson.core:jackson-annotations | 2.21 | direct |
| Maven | com.fasterxml.jackson.core:jackson-core | — | direct |
| Maven | com.fasterxml.jackson.core:jackson-core | 2.21.5 | direct |
| Maven | com.fasterxml.jackson.core:jackson-databind | — | direct |
| Maven | com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-base | 2.21.5 | direct |
| Maven | com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-json-provider | — | direct |
| Maven | com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-json-provider | 2.21.5 | direct |
| Maven | com.fasterxml.jackson.module:jackson-module-jakarta-xmlbind-annotations | — | direct |
| Maven | com.fasterxml.jackson.module:jackson-module-jakarta-xmlbind-annotations | 2.21.5 | direct |
| Maven | com.github.ben-manes.caffeine:caffeine | — | direct |
| Maven | com.github.ben-manes.caffeine:caffeine | 3.2.2 | direct |
| Maven | com.github.junrar:junrar | 7.5.8 | direct |
| Maven | com.google.code.gson:gson | — | direct |
| Maven | com.google.code.gson:gson | 2.13.1 | direct |
| Maven | com.google.errorprone:error_prone_annotations | 2.3.3 | direct |
| Maven | com.google.guava:guava-testlib | — | direct |
| Maven | com.google.guava:guava-testlib | 31.1-jre | direct |
| Maven | com.google.protobuf:protobuf-bom | 4.31.1 | direct |
| Maven | com.google.protobuf:protobuf-java | — | direct |
| Maven | com.google.protobuf:protobuf-java-util | — | direct |
| Maven | com.microsoft.onnxruntime:onnxruntime | — | direct |
| Maven | com.microsoft.onnxruntime:onnxruntime | 1.25.0 | direct |
| Maven | com.microsoft.onnxruntime:onnxruntime_gpu | — | direct |
| Maven | com.microsoft.onnxruntime:onnxruntime_gpu | 1.25.0 | direct |
| Maven | com.oracle.bedrock:bedrock-bom | 7.0.9 | direct |
| Maven | com.oracle.oci.sdk:oci-java-sdk-bom | 3.69.0 | direct |
| Maven | com.sleepycat:je | — | direct |
| Maven | com.sleepycat:je | 6.2.31 | direct |
| Maven | com.squareup.okhttp3:okhttp-jvm | — | direct |
| Maven | com.squareup.okhttp3:okhttp-jvm | 5.1.0 | direct |
| Maven | com.sun.xml.bind:jaxb-core | — | direct |
| Maven | com.sun.xml.bind:jaxb-core | 4.0.5 | direct |
| Maven | com.sun.xml.bind:jaxb-impl | — | direct |
| Maven | com.sun.xml.bind:jaxb-impl | 4.0.5 | direct |
| Maven | com.sun.xml.bind:jaxb-xjc | — | direct |
| Maven | com.sun.xml.bind:jaxb-xjc | 4.0.5 | direct |
| Maven | dev.langchain4j:langchain4j-bom | 1.2.0 | direct |
| Maven | io.github.classgraph:classgraph | — | direct |
| Maven | io.github.classgraph:classgraph | 4.8.175 | direct |
| Maven | io.grpc:grpc-api | — | direct |
| Maven | io.grpc:grpc-bom | 1.75.0 | direct |
| Maven | io.grpc:grpc-core | — | direct |
| Maven | io.grpc:grpc-inprocess | — | direct |
| Maven | io.grpc:grpc-netty | — | direct |
| Maven | io.grpc:grpc-protobuf | — | direct |
| Maven | io.grpc:grpc-services | — | direct |
| Maven | io.grpc:grpc-stub | — | direct |
| Maven | io.helidon.webserver:helidon-webserver-grpc | — | direct |
| Maven | io.helidon:helidon-bom | — | direct |
| Maven | io.helidon:helidon-bom | 4.3.0 | direct |
| Maven | io.jhdf:jhdf | 0.7.0-alpha | direct |
| Maven | io.micrometer:micrometer-core | — | direct |
| Maven | io.micrometer:micrometer-core | 1.13.4 | direct |
| Maven | io.micrometer:micrometer-registry-prometheus | — | direct |
| Maven | io.micrometer:micrometer-registry-prometheus | 1.13.4 | direct |
| Maven | io.netty:netty-bom | 4.1.136 | direct |
| Maven | io.netty:netty-codec-http | — | direct |
| Maven | io.netty:netty-codec-http2 | — | direct |
| Maven | io.netty:netty-handler-proxy | — | direct |
| Maven | io.netty:netty-transport-native-unix-common | — | direct |
| Maven | io.opentelemetry.instrumentation:opentelemetry-grpc-1.6 | — | direct |
| Maven | io.opentelemetry.instrumentation:opentelemetry-grpc-1.6 | 2.14.0-alpha | direct |
| Maven | io.opentelemetry.proto:opentelemetry-proto | — | direct |
| Maven | io.opentelemetry.proto:opentelemetry-proto | 1.0.0-alpha | direct |
| Maven | io.opentelemetry:opentelemetry-bom | 1.64.0 | direct |
| Maven | io.opentelemetry:opentelemetry-exporter-otlp | — | direct |
| Maven | io.opentelemetry:opentelemetry-sdk-extension-autoconfigure | — | direct |
| Maven | io.projectreactor.netty:reactor-netty-http | 1.2.8 | direct |
| Maven | io.reactivex.rxjava3:rxjava | — | direct |
| Maven | io.reactivex.rxjava3:rxjava | 3.0.2 | direct |
| Maven | io.smallrye:jandex | — | direct |
| Maven | io.smallrye:jandex | 3.1.2 | direct |
| Maven | it.unimi.dsi:fastutil-core | — | direct |
| Maven | it.unimi.dsi:fastutil-core | 8.5.16 | direct |
| Maven | jakarta.activation:jakarta.activation-api | — | direct |
| Maven | jakarta.activation:jakarta.activation-api | 2.1.3 | direct |
| Maven | jakarta.annotation:jakarta.annotation-api | — | direct |
| Maven | jakarta.annotation:jakarta.annotation-api | 2.1.1 | direct |
| Maven | jakarta.enterprise:jakarta.enterprise.cdi-api | — | direct |
| Maven | jakarta.enterprise:jakarta.enterprise.cdi-api | 4.0.1 | direct |
| Maven | jakarta.inject:jakarta.inject-api | — | direct |
| Maven | jakarta.inject:jakarta.inject-api | 2.0.1 | direct |
| Maven | jakarta.interceptor:jakarta.interceptor-api | — | direct |
| Maven | jakarta.interceptor:jakarta.interceptor-api | 2.1.0 | direct |
| Maven | jakarta.json.bind:jakarta.json.bind-api | — | direct |
| Maven | jakarta.json.bind:jakarta.json.bind-api | 3.0.1 | direct |
| Maven | jakarta.json:jakarta.json-api | — | direct |
| Maven | jakarta.json:jakarta.json-api | 2.1.3 | direct |
| Maven | jakarta.mail:jakarta.mail-api | 2.1.3 | direct |
| Maven | jakarta.persistence:jakarta.persistence-api | — | direct |
| Maven | jakarta.persistence:jakarta.persistence-api | 3.2.0 | direct |
| Maven | jakarta.resource:jakarta.resource-api | — | direct |
| Maven | jakarta.resource:jakarta.resource-api | 2.1.0 | direct |
| Maven | jakarta.servlet.jsp:jakarta.servlet.jsp-api | — | direct |
| Maven | jakarta.servlet.jsp:jakarta.servlet.jsp-api | 3.0.0 | direct |
| Maven | jakarta.servlet:jakarta.servlet-api | — | direct |
| Maven | jakarta.servlet:jakarta.servlet-api | 5.0.0 | direct |
| Maven | jakarta.ws.rs:jakarta.ws.rs-api | — | direct |
| Maven | jakarta.ws.rs:jakarta.ws.rs-api | 3.1.0 | direct |
| Maven | jakarta.xml.bind:jakarta.xml.bind-api | — | direct |
| Maven | jakarta.xml.bind:jakarta.xml.bind-api | 4.0.2 | direct |
| Maven | javax.cache:cache-api | — | direct |
| Maven | javax.cache:cache-api | 1.1.1 | direct |
| Maven | junit:junit | — | direct |
| Maven | junit:junit | 4.13.2 | direct |
| Maven | net.bytebuddy:byte-buddy | — | direct |
| Maven | net.bytebuddy:byte-buddy | 1.17.6 | direct |
| Maven | net.bytebuddy:byte-buddy-agent | — | direct |
| Maven | net.bytebuddy:byte-buddy-agent | 1.17.6 | direct |
| Maven | net.java.dev.jna:jna | — | direct |
| Maven | net.java.dev.jna:jna | 5.14.0 | direct |
| Maven | net.spy:spymemcached | — | direct |
| Maven | net.spy:spymemcached | 2.12.3 | direct |
| Maven | org.apache.felix:org.apache.felix.main | — | direct |
| Maven | org.apache.felix:org.apache.felix.main | 6.0.4 | direct |
| Maven | org.apache.groovy:groovy | 4.0.27 | direct |
| Maven | org.apache.groovy:groovy-ant | 4.0.27 | direct |
| Maven | org.apache.httpcomponents.client5:httpclient5 | 5.6 | direct |
| Maven | org.apache.logging.log4j:log4j-api | — | direct |
| Maven | org.apache.logging.log4j:log4j-api | 2.25.4 | direct |
| Maven | org.apache.logging.log4j:log4j-core | — | direct |
| Maven | org.apache.logging.log4j:log4j-core | 2.25.4 | direct |
| Maven | org.apache.logging.log4j:log4j-to-slf4j | — | direct |
| Maven | org.apache.logging.log4j:log4j-to-slf4j | 2.25.4 | direct |
| Maven | org.apache.lucene:lucene-analysis-common | — | direct |
| Maven | org.apache.lucene:lucene-analysis-common | 10.2.2 | direct |
| Maven | org.apache.lucene:lucene-core | — | direct |
| Maven | org.apache.lucene:lucene-core | 10.2.2 | direct |
| Maven | org.apache.lucene:lucene-queryparser | — | direct |
| Maven | org.apache.lucene:lucene-queryparser | 10.2.2 | direct |
| Maven | org.apache.tika:tika-bom | 3.3.0 | direct |
| Maven | org.asciidoctor:asciidoctorj-diagram | — | direct |
| Maven | org.asciidoctor:asciidoctorj-diagram | 2.3.2 | direct |
| Maven | org.codehaus.jettison:jettison | — | direct |
| Maven | org.codehaus.jettison:jettison | 1.5.4 | direct |
| Maven | org.eclipse.microprofile.config:microprofile-config-api | — | direct |
| Maven | org.eclipse.microprofile.config:microprofile-config-api | 3.1 | direct |
| Maven | org.eclipse.microprofile.health:microprofile-health-api | — | direct |
| Maven | org.eclipse.microprofile.health:microprofile-health-api | 4.0.1 | direct |
| Maven | org.eclipse.microprofile.metrics:microprofile-metrics-api | — | direct |
| Maven | org.eclipse.microprofile.metrics:microprofile-metrics-api | 5.1.2 | direct |
| Maven | org.eclipse.parsson:parsson-media | 1.1.7 | direct |
| Maven | org.eclipse.persistence:eclipselink | — | direct |
| Maven | org.eclipse.persistence:eclipselink | 3.0.4 | direct |
| Maven | org.eclipse.persistence:jakarta.persistence.jakarta.persistence-api | 3.0.4 | direct |
| Maven | org.glassfish.jersey.core:jersey-server | — | direct |
| Maven | org.glassfish.jersey.inject:jersey-hk2 | — | direct |
| Maven | org.glassfish.jersey:jersey-bom | — | direct |
| Maven | org.glassfish.jersey:jersey-bom | 4.0.2 | direct |
| Maven | org.glassfish:jakarta.json | — | direct |
| Maven | org.glassfish:jakarta.json | 2.0.1 | direct |
| Maven | org.graalvm.js:js-language | — | direct |
| Maven | org.graalvm.js:js-language | 24.2.1 | direct |
| Maven | org.graalvm.polyglot:js | — | direct |
| Maven | org.graalvm.polyglot:js | 24.2.1 | direct |
| Maven | org.graalvm.polyglot:polyglot | — | direct |
| Maven | org.graalvm.polyglot:polyglot | 24.2.1 | direct |
| Maven | org.graalvm.sdk:graal-sdk | — | direct |
| Maven | org.graalvm.sdk:graal-sdk | 24.2.1 | direct |
| Maven | org.hamcrest:hamcrest | — | direct |
| Maven | org.hamcrest:hamcrest | 3.0 | direct |
| Maven | org.hamcrest:hamcrest-all | — | direct |
| Maven | org.hamcrest:hamcrest-all | 1.3 | direct |
| Maven | org.hamcrest:hamcrest-core | — | direct |
| Maven | org.hamcrest:hamcrest-core | 3.0 | direct |
| Maven | org.hsqldb:hsqldb | — | direct |
| Maven | org.hsqldb:hsqldb | 2.7.1 | direct |
| Maven | org.hsqldb:hsqldb | 2.7.4 | direct |
| Maven | org.jacoco:org.jacoco.agent | — | direct |
| Maven | org.jacoco:org.jacoco.agent | 0.8.13 | direct |
| Maven | org.jboss.weld.se:weld-se-core | — | direct |
| Maven | org.jboss.weld.se:weld-se-core | 5.1.1.SP2 | direct |
| Maven | org.jboss.weld:weld-junit5 | — | direct |
| Maven | org.jboss.weld:weld-junit5 | 3.0.0 | direct |
| Maven | org.junit.jupiter:junit-jupiter | — | direct |
| Maven | org.junit.jupiter:junit-jupiter | 5.12.2 | direct |
| Maven | org.junit.jupiter:junit-jupiter-engine | — | direct |
| Maven | org.junit.jupiter:junit-jupiter-engine | 5.12.2 | direct |
| Maven | org.junit.vintage:junit-vintage-engine | 5.12.2 | direct |
| Maven | org.junit:junit-bom | 5.12.2 | direct |
| Maven | org.mockito:mockito-core | — | direct |
| Maven | org.mockito:mockito-core | 5.18.0 | direct |
| Maven | org.openjdk.jol:jol-core | — | direct |
| Maven | org.openjdk.jol:jol-core | 0.17 | direct |
| Maven | org.ow2.asm:asm | — | direct |
| Maven | org.ow2.asm:asm | 9.10.1 | direct |
| Maven | org.ow2.asm:asm-analysis | — | direct |
| Maven | org.ow2.asm:asm-analysis | 9.10.1 | direct |
| Maven | org.ow2.asm:asm-commons | — | direct |
| Maven | org.ow2.asm:asm-commons | 9.10.1 | direct |
| Maven | org.ow2.asm:asm-tree | — | direct |
| Maven | org.ow2.asm:asm-tree | 9.10.1 | direct |
| Maven | org.ow2.asm:asm-util | — | direct |
| Maven | org.ow2.asm:asm-util | 9.10.1 | direct |
| Maven | org.slf4j:slf4j-api | — | direct |
| Maven | org.slf4j:slf4j-api | 2.0.17 | direct |
| Maven | org.slf4j:slf4j-debug | 2.0.17 | direct |
| Maven | org.slf4j:slf4j-jdk14 | 2.0.17 | direct |
| Maven | org.slf4j:slf4j-simple | — | direct |
| Maven | org.slf4j:slf4j-simple | 1.7.36 | direct |
| Maven | org.slf4j:slf4j-simple | 2.0.17 | direct |
| Maven | org.testcontainers:junit-jupiter | — | direct |
| Maven | org.testcontainers:junit-jupiter | 1.17.3 | direct |
| Maven | org.testcontainers:junit-jupiter | 1.21.3 | direct |
| Maven | org.testcontainers:testcontainers | — | direct |
| Maven | org.testcontainers:testcontainers | 1.17.3 | direct |
| Maven | org.testcontainers:testcontainers | 1.21.3 | direct |
| Maven | org.wiremock:wiremock | — | direct |
| Maven | org.wiremock:wiremock | 3.13.1 | direct |
| Maven | ch.qos.logback:logback-classic | 1.5.6 | indirect |
| Maven | com.azure:azure-storage-blob | 12.30.0 | indirect |
| Maven | com.github.eirslett:frontend-maven-plugin | 1.15.0 | indirect |
| Maven | com.google.cloud.tools:jib-maven-plugin | 2.5.2 | indirect |
| Maven | com.google.cloud:google-cloud-storage | 2.50.0 | indirect |
| Maven | com.google.code.maven-replacer-plugin:maven-replacer-plugin | 1.4.1 | indirect |
| Maven | com.google.code.maven-replacer-plugin:replacer | — | indirect |
| Maven | com.google.code.maven-replacer-plugin:replacer | 1.5.2 | indirect |
| Maven | com.google.code.maven-replacer-plugin:replacer | 1.5.3 | indirect |
| Maven | com.h2database:h2 | 2.2.220 | indirect |
| Maven | com.oracle.bedrock.coherence:coherence-21.06-testing-support | 5.1.3 | indirect |
| Maven | com.oracle.bedrock.coherence:coherence-3.7.1 | — | indirect |
| Maven | com.oracle.bedrock.coherence:coherence-3.7.1-testing-support | — | indirect |
| Maven | com.oracle.bedrock:bedrock-core | — | indirect |
| Maven | com.oracle.bedrock:bedrock-runtime | — | indirect |
| Maven | com.oracle.bedrock:bedrock-runtime-jacoco | — | indirect |
| Maven | com.oracle.bedrock:bedrock-runtime-maven | — | indirect |
| Maven | com.oracle.bedrock:bedrock-runtime-remote | — | indirect |
| Maven | com.oracle.bedrock:bedrock-runtime-windows | — | indirect |
| Maven | com.oracle.bedrock:bedrock-testing-support | — | indirect |
| Maven | com.oracle.coherence.ce.tests:grpc-client-tck | — | indirect |
| Maven | com.oracle.coherence.ce.tests:grpc-client-tck-21 | — | indirect |
| Maven | com.oracle.coherence.ce.tests:grpc-proxy-tck | — | indirect |
| Maven | com.oracle.coherence.ce.tests:metrics | — | indirect |
| Maven | com.oracle.coherence.ce.tests:queues | — | indirect |
| Maven | com.oracle.coherence.ce:coherence | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-bedrock | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-bedrock-testing-support | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-bom | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-cdi | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-cdi-server | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-concurrent | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-discovery | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-grpc | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-grpc-client-common | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-grpc-proxy | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-grpc-proxy-common | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-grpc-proxy-helidon | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-hnsw | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-http-netty | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-java-client | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-jcache | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-jpa | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-json | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-login | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-lucene | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-management | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-micrometer | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-mp-config | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-mp-health | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-mp-metrics | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-protobuf | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-rag | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-rag-aws-s3-loader | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-rag-azure-blob-storage-loader | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-rag-deepseek | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-rag-google-cloud-storage-loader | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-rag-oci | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-rag-oci-object-storage-loader | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-rag-ollama | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-rag-openai | — | indirect |
| Maven | com.oracle.coherence.ce:coherence-rest | — | indirect |
| Maven | com.oracle.coherence.ce:com.oracle.coherence.ce.gradle.plugin | — | indirect |
| Maven | com.oracle.coherence.ce:pof-maven-plugin | — | indirect |
| Maven | com.oracle.coherence.ce:pof-maven-plugin | 26.10-SNAPSHOT | indirect |
| Maven | com.oracle.coherence.ce:security-config-maven-plugin | — | indirect |
| Maven | com.oracle.coherence.guides:multi-cluster-server | — | indirect |
| Maven | com.oracle.coherence.hibernate:coherence-hibernate-cache-store | 2.0.0 | indirect |
| Maven | com.oracle.coherence.moditect:moditect-maven-plugin | — | indirect |
| Maven | com.oracle.coherence.moditect:moditect-maven-plugin | 25.09 | indirect |
| Maven | com.oracle.coherence.tests:persistence | — | indirect |
| Maven | com.oracle.oci.sdk:oci-java-sdk-common-httpclient-jersey3 | — | indirect |
| Maven | com.oracle.oci.sdk:oci-java-sdk-core | — | indirect |
| Maven | com.oracle.oci.sdk:oci-java-sdk-generativeaiinference | — | indirect |
| Maven | com.oracle.oci.sdk:oci-java-sdk-objectstorage | — | indirect |
| Maven | com.oracle.tools.coherence:coherence-12.2.1-testing-support | — | indirect |
| Maven | dev.langchain4j:langchain4j | — | indirect |
| Maven | dev.langchain4j:langchain4j | 1.1.0 | indirect |
| Maven | dev.langchain4j:langchain4j-anthropic | — | indirect |
| Maven | dev.langchain4j:langchain4j-coherence | — | indirect |
| Maven | dev.langchain4j:langchain4j-document-parser-apache-tika | — | indirect |
| Maven | dev.langchain4j:langchain4j-document-parser-apache-tika | 1.1.0-beta7 | indirect |
| Maven | dev.langchain4j:langchain4j-embeddings | — | indirect |
| Maven | dev.langchain4j:langchain4j-embeddings-all-minilm-l6-v2 | 1.1.0-beta7 | indirect |
| Maven | dev.langchain4j:langchain4j-ollama | — | indirect |
| Maven | dev.langchain4j:langchain4j-open-ai | — | indirect |
| Maven | io.helidon.build-tools:sitegen-maven-plugin | — | indirect |
| Maven | io.helidon.build-tools:sitegen-maven-plugin | 2.3.7 | indirect |
| Maven | io.helidon.config:helidon-config-metadata | — | indirect |
| Maven | io.helidon.config:helidon-config-yaml | — | indirect |
| Maven | io.helidon.http.media:helidon-http-media-jsonb | — | indirect |
| Maven | io.helidon.logging:helidon-logging-jul | — | indirect |
| Maven | io.helidon.microprofile.bundles:helidon-microprofile | — | indirect |
| Maven | io.helidon.microprofile.bundles:helidon-microprofile-core | — | indirect |
| Maven | io.helidon.microprofile.cdi:helidon-microprofile-cdi | — | indirect |
| Maven | io.helidon.microprofile.config:helidon-microprofile-config | — | indirect |
| Maven | io.helidon.microprofile.graphql:helidon-microprofile-graphql-server | — | indirect |
| Maven | io.helidon.microprofile.health:helidon-microprofile-health | — | indirect |
| Maven | io.helidon.microprofile.metrics:helidon-microprofile-metrics | — | indirect |
| Maven | io.helidon.microprofile.testing:helidon-microprofile-testing-junit5 | — | indirect |
| Maven | io.helidon.microprofile:helidon-microprofile-cors | — | indirect |
| Maven | io.helidon.webclient:helidon-webclient | — | indirect |
| Maven | io.netty:netty-all | — | indirect |
| Maven | io.r2dbc:r2dbc-bom | Borca-SR1 | indirect |
| Maven | io.r2dbc:r2dbc-h2 | — | indirect |
| Maven | io.r2dbc:r2dbc-h2 | 0.9.0.RELEASE | indirect |
| Maven | io.smallrye:jandex-maven-plugin | — | indirect |
| Maven | io.smallrye:jandex-maven-plugin | 3.1.2 | indirect |
| Maven | javax.cache:cache-tests | — | indirect |
| Maven | javax.xml.bind:jaxb-api | 2.3.1 | indirect |
| Maven | org.apache.felix:maven-bundle-plugin | — | indirect |
| Maven | org.apache.felix:maven-bundle-plugin | 5.1.1 | indirect |
| Maven | org.apache.maven.doxia:doxia-core | 1.6 | indirect |
| Maven | org.apache.maven.doxia:doxia-site-renderer | 1.6 | indirect |
| Maven | org.apache.maven.plugin-tools:maven-plugin-annotations | — | indirect |
| Maven | org.apache.maven.plugins:maven-antrun-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-antrun-plugin | 1.8 | indirect |
| Maven | org.apache.maven.plugins:maven-assembly-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-assembly-plugin | 3.3.0 | indirect |
| Maven | org.apache.maven.plugins:maven-assembly-plugin | 3.6.0 | indirect |
| Maven | org.apache.maven.plugins:maven-clean-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-clean-plugin | 3.2.0 | indirect |
| Maven | org.apache.maven.plugins:maven-compiler-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-compiler-plugin | 1.37 | indirect |
| Maven | org.apache.maven.plugins:maven-compiler-plugin | 3.14.0 | indirect |
| Maven | org.apache.maven.plugins:maven-dependency-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-dependency-plugin | 3.1.2 | indirect |
| Maven | org.apache.maven.plugins:maven-dependency-plugin | 3.2.0 | indirect |
| Maven | org.apache.maven.plugins:maven-dependency-plugin | 3.3.0 | indirect |
| Maven | org.apache.maven.plugins:maven-deploy-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-deploy-plugin | 3.1.1 | indirect |
| Maven | org.apache.maven.plugins:maven-enforcer-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-enforcer-plugin | 3.1.0 | indirect |
| Maven | org.apache.maven.plugins:maven-failsafe-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-failsafe-plugin | 3.0.0-M5 | indirect |
| Maven | org.apache.maven.plugins:maven-failsafe-plugin | 3.0.0-M7 | indirect |
| Maven | org.apache.maven.plugins:maven-failsafe-plugin | 3.1.2 | indirect |
| Maven | org.apache.maven.plugins:maven-failsafe-plugin | 3.5.3 | indirect |
| Maven | org.apache.maven.plugins:maven-gpg-plugin | 3.1.0 | indirect |
| Maven | org.apache.maven.plugins:maven-install-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-install-plugin | 3.1.1 | indirect |
| Maven | org.apache.maven.plugins:maven-jar-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-jar-plugin | 3.0.2 | indirect |
| Maven | org.apache.maven.plugins:maven-jar-plugin | 3.3.0 | indirect |
| Maven | org.apache.maven.plugins:maven-javadoc-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-javadoc-plugin | 3.5.0 | indirect |
| Maven | org.apache.maven.plugins:maven-plugin-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-project-info-reports-plugin | 3.0.0 | indirect |
| Maven | org.apache.maven.plugins:maven-resources-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-resources-plugin | 3.3.1 | indirect |
| Maven | org.apache.maven.plugins:maven-shade-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-shade-plugin | 3.4.1 | indirect |
| Maven | org.apache.maven.plugins:maven-site-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-site-plugin | 3.9.0 | indirect |
| Maven | org.apache.maven.plugins:maven-source-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-surefire-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-surefire-plugin | 3.0.0-M5 | indirect |
| Maven | org.apache.maven.plugins:maven-surefire-plugin | 3.0.0-M7 | indirect |
| Maven | org.apache.maven.plugins:maven-surefire-plugin | 3.1.2 | indirect |
| Maven | org.apache.maven.plugins:maven-surefire-plugin | 3.5.3 | indirect |
| Maven | org.apache.maven.plugins:maven-surefire-report-plugin | — | indirect |
| Maven | org.apache.maven.shared:maven-artifact-transfer | — | indirect |
| Maven | org.apache.maven.shared:maven-artifact-transfer | 0.13.1 | indirect |
| Maven | org.apache.maven:maven-artifact | 3.9.10 | indirect |
| Maven | org.apache.maven:maven-core | — | indirect |
| Maven | org.apache.maven:maven-core | 3.9.10 | indirect |
| Maven | org.apache.maven:maven-model | 3.9.10 | indirect |
| Maven | org.apache.maven:maven-plugin-api | — | indirect |
| Maven | org.apache.maven:maven-plugin-api | 3.9.10 | indirect |
| Maven | org.apache.sshd:sshd-sftp | 2.12.0 | indirect |
| Maven | org.assertj:assertj-core | 3.22.0 | indirect |
| Maven | org.codehaus.gmavenplus:gmavenplus-plugin | — | indirect |
| Maven | org.codehaus.gmavenplus:gmavenplus-plugin | 4.2.1 | indirect |
| Maven | org.codehaus.mojo:build-helper-maven-plugin | — | indirect |
| Maven | org.codehaus.mojo:build-helper-maven-plugin | 1.8 | indirect |
| Maven | org.codehaus.mojo:exec-maven-plugin | — | indirect |
| Maven | org.codehaus.mojo:exec-maven-plugin | 1.6.0 | indirect |
| Maven | org.codehaus.mojo:exec-maven-plugin | 3.0.0 | indirect |
| Maven | org.codehaus.mojo:exec-maven-plugin | 3.1.0 | indirect |
| Maven | org.codehaus.mojo:flatten-maven-plugin | — | indirect |
| Maven | org.codehaus.mojo:flatten-maven-plugin | 1.2.2 | indirect |
| Maven | org.codehaus.mojo:nbm-maven-plugin | 2.6.2 | indirect |
| Maven | org.commonjava.maven.plugins:directory-maven-plugin | — | indirect |
| Maven | org.commonjava.maven.plugins:directory-maven-plugin | 0.1 | indirect |
| Maven | org.glassfish.jaxb:jaxb-runtime | 2.3.8 | indirect |
| Maven | org.glassfish.jersey.connectors:jersey-apache5-connector | — | indirect |
| Maven | org.glassfish.jersey.containers:jersey-container-servlet | — | indirect |
| Maven | org.glassfish.jersey.core:jersey-client | — | indirect |
| Maven | org.glassfish.jersey.core:jersey-common | — | indirect |
| Maven | org.glassfish.jersey.ext.cdi:jersey-weld2-se | — | indirect |
| Maven | org.glassfish.jersey.ext.microprofile:jersey-mp-config | — | indirect |
| Maven | org.glassfish.jersey.ext:jersey-entity-filtering | — | indirect |
| Maven | org.glassfish.jersey.media:jersey-media-json-jackson | — | indirect |
| Maven | org.glassfish.jersey.media:jersey-media-json-jettison | — | indirect |
| Maven | org.glassfish.jersey.media:jersey-media-sse | — | indirect |
| Maven | org.graalvm.buildtools:native-maven-plugin | — | indirect |
| Maven | org.graalvm.buildtools:native-maven-plugin | 0.11.0 | indirect |
| Maven | org.hamcrest:hamcrest-library | 1.2 | indirect |
| Maven | org.hibernate:hibernate-core | 5.4.27 | indirect |
| Maven | org.jacoco:jacoco-maven-plugin | — | indirect |
| Maven | org.jline:jline | 3.26.3 | indirect |
| Maven | org.junit.jupiter:junit-jupiter-api | — | indirect |
| Maven | org.junit.jupiter:junit-jupiter-api | 5.12.2 | indirect |
| Maven | org.junit.jupiter:junit-jupiter-params | — | indirect |
| Maven | org.junit.jupiter:junit-jupiter-params | 5.12.2 | indirect |
| Maven | org.junit.platform:junit-platform-commons | — | indirect |
| Maven | org.junit.platform:junit-platform-launcher | — | indirect |
| Maven | org.mockito:mockito-junit-jupiter | — | indirect |
| Maven | org.mockito:mockito-junit-jupiter | 5.18.0 | indirect |
| Maven | org.openjdk.jmh:jmh-core | 1.37 | indirect |
| Maven | org.openjdk.jmh:jmh-generator-annprocess | 1.37 | indirect |
| Maven | org.owasp:dependency-check-maven | — | indirect |
| Maven | org.owasp:dependency-check-maven | 12.1.6 | indirect |
| Maven | org.slf4j:jcl-over-slf4j | — | indirect |
| Maven | org.slf4j:jul-to-slf4j | — | indirect |
| Maven | org.slf4j:slf4j-log4j12 | — | indirect |
| Maven | org.snakeyaml:snakeyaml-engine | 2.8 | indirect |
| Maven | org.xolstice.maven.plugins:protobuf-maven-plugin | — | indirect |
| Maven | org.xolstice.maven.plugins:protobuf-maven-plugin | 0.6.1 | indirect |
| Maven | software.amazon.awssdk:bom | 2.31.15 | indirect |
| Maven | software.amazon.awssdk:s3 | — | indirect |
| Maven | xerces:xercesImpl | 2.12.2 | indirect |
| npm | esbuild | 0.23.1 | indirect |
| npm | text-lower-case | ^1.0.4 | indirect |
| npm | upper-case | ^2.0.2 | indirect |
Installing maven:com.oracle.coherence.ce:coherence-cdi@26.04 pulls in 7 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Spotted something off in this report, or have thoughts to share? Wrong measurements, missed tooling, ideas, questions — anything is welcome. Every message is read and gets a response.
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.10.0, schema v0.34.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Maven.