Apache WSS4J

I Use This!

Inactive

Analyzed 1 day ago. based on code collected 3 days ago.

Project Summary

Apache WSS4J is an implementation of the OASIS Web services Security (WS-Security) specification in Java. It is primarily a Java library that can be used to sign and verify SOAP Messages with WS-Security information. Apache WSS4J can be used for securing Web services deployed in virtually any application server, but it includes special support for Apache Axis.

In a Nutshell, Apache WSS4J...

...
has had 2,581 commits made by 20 contributors
representing 131,979 lines of code
...
is mostly written in Java
with an average number of source code comments
...
has a well established, mature codebase
maintained by nobody
with stable Y-O-Y commits
...
took an estimated 33 years of effort (COCOMO model)
starting with its first commit in February, 2004
ending with its most recent commit over 6 years ago

Quick Reference

Organization:

Apache Software Foundation

Project Links:

Homepage

Code Locations:

https://svn.apache.org/repos/asf...

Similar Projects:

Managers:

Daniel Kulp

Licenses

Apache License 2.0

Permitted

Commercial Use

Modify

Distribute

Place Warranty

Sub-License

Private Use

Use Patent Claims

Forbidden

Hold Liable

Use Trademarks

Required

Include Copyright

State Changes

Include License

Include Notice

These details are provided for information only. No information here is legal advice and should not be used as such.

All Licenses

Project Security

Vulnerabilities per Version ( last 10 releases )

There are no reported vulnerabilities

Project Vulnerability Report

Security Confidence Index

Poor security track-record

Favorable security track-record

Vulnerability Exposure Index

Many reported vulnerabilities

Few reported vulnerabilities

About Project Vulnerability Report

Did You Know...

...
65% of companies leverage OSS to speed application development in 2016
...
you can subscribe to e-mail newsletters to receive update from the Open Hub blog
...
nearly 1 in 3 companies have no process for identifying, tracking, or remediating known open source vulnerabilities
...
compare projects before you chose one to use