{"id":48680767,"url":"https://github.com/ModeShape/modeshape","last_synced_at":"2026-04-26T20:00:47.888Z","repository":{"id":1301846,"uuid":"1244027","full_name":"ModeShape/modeshape","owner":"ModeShape","description":"ModeShape is a distributed, hierarchical, transactional, and consistent data store with support for queries, full-text search, events, versioning, references, and flexible and dynamic schemas. It is very fast, highly available, extremely scalable, and it is 100% open source and written in Java. Clients use the JSR-283 standard Java API for content repositories (aka, JCR) or ModeShape's REST API, and can query content through JDBC and SQL.","archived":false,"fork":false,"pushed_at":"2023-01-02T22:01:39.000Z","size":134310,"stargazers_count":223,"open_issues_count":36,"forks_count":214,"subscribers_count":22,"default_branch":"master","last_synced_at":"2026-02-26T05:08:47.445Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"http://www.modeshape.org","language":"Java","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/ModeShape.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2011-01-12T02:30:46.000Z","updated_at":"2026-02-08T15:06:16.000Z","dependencies_parsed_at":"2023-01-13T11:45:19.576Z","dependency_job_id":null,"html_url":"https://github.com/ModeShape/modeshape","commit_stats":null,"previous_names":[],"tags_count":83,"template":false,"template_full_name":null,"purl":"pkg:github/ModeShape/modeshape","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ModeShape%2Fmodeshape","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ModeShape%2Fmodeshape/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ModeShape%2Fmodeshape/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ModeShape%2Fmodeshape/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ModeShape","download_url":"https://codeload.github.com/ModeShape/modeshape/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ModeShape%2Fmodeshape/sbom","scorecard":{"id":95457,"data":{"date":"2025-08-11","repo":{"name":"github.com/ModeShape/modeshape","commit":"794cfdabb67a90f24629c4fff0424a6125f8f95b"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"16 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-763g-fqq7-48wg","Warn: Project is vulnerable to: GHSA-gp32-7h29-rpxm","Warn: Project is vulnerable to: GHSA-6phf-73q6-gh87","Warn: Project is vulnerable to: GHSA-p66x-2cv9-qq3v","Warn: Project is vulnerable to: GHSA-wxr5-93ph-8wr9","Warn: Project is vulnerable to: GHSA-6hgm-866r-3cjv","Warn: Project is vulnerable to: GHSA-fjq5-5j5f-mvxh","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-2qrg-x229-3v8q","Warn: Project is vulnerable to: GHSA-65fg-84f6-3jq3","Warn: Project is vulnerable to: GHSA-f7vh-qwp3-x37m","Warn: Project is vulnerable to: GHSA-fp5r-v3w9-4333","Warn: Project is vulnerable to: GHSA-w9p3-5cr8-m3jj"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T08:54:26.430Z","repository_id":1301846,"created_at":"2025-08-15T08:54:26.430Z","updated_at":"2025-08-15T08:54:26.430Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32310804,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-26T19:15:34.056Z","status":"ssl_error","status_checked_at":"2026-04-26T19:15:15.467Z","response_time":129,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2026-04-11T01:00:36.062Z","updated_at":"2026-04-26T20:00:47.881Z","avatar_url":"https://github.com/ModeShape.png","language":"Java","funding_links":[],"categories":["数据库"],"sub_categories":["Spring Cloud框架"],"readme":"[![License](http://img.shields.io/:license-apache%202.0-brightgreen.svg)](http://www.apache.org/licenses/LICENSE-2.0.html)\n[![Maven Central](https://maven-badges.herokuapp.com/maven-central/org.modeshape/modeshape-parent/badge.svg)](http://search.maven.org/#search%7Cga%7C1%7Cg%3A%22org.modeshape%22)\n[![Build Status](https://travis-ci.org/ModeShape/modeshape.svg?branch=master)](http://travis-ci.org/ModeShape/modeshape)\n\nCopyright 2008-2016 ModeShape Project.\nLicensed under the Apache License, Version 2.0.\n\n# The ModeShape project\n\nThis is the official Git repository for the ModeShape project.\n\nModeShape is an open source implementation of the JCR 2.0 ([JSR-283](http://www.jcp.org/en/jsr/detail?id=283])) specification and standard API.\nTo your applications, ModeShape looks and behaves like a regular JCR repository. Applications can search, query, navigate, change, version, listen for changes, etc.\nBut ModeShape can store that content in a variety of back-end stores (including relational databases, the filesystem, etc.), or it can\naccess and update existing content from *other* kinds of systems (including file systems, Git repositories, JDBC database metadata, and other JCR repositories which support CMIS).\nModeShape's connector architecture means that you can write custom connectors to access any kind of system. And ModeShape can even federate multiple back-end systems\ninto a single, unified virtual repository.\n\nModeShape repositories can be used in a variety of applications. One of the most obvious ones is in provisioning and management, where it's critical to \nunderstand and keep track of the metadata for models, database, services, components, applications, clusters, machines, and other systems used in an enterprise. \nGovernance takes that a step farther, by also tracking the policies and expectations against which performance can be verified. In these cases, a repository \nis an excellent mechanism for managing this complex and highly-varied information. But a ModeShape repository doesn't have to be large and complex: it \ncould just manage configuration information for an application, or it could just provide a JCR interface on top of a couple of non-JCR systems.\n\nFor more information on ModeShape, including getting started guides, reference guides, and downloadable binaries, visit the project's website at [http://www.modeshape.org](http://www.modeshape.org)\nor follow us on our [blog](http://modeshape.wordpress.org) or on [Twitter](http://twitter.com/modeshape). Or hop into our [IRC chat room](http://www.jboss.org/modeshape/chat)\nand talk our community of contributors and users.\n\n## Get the code\n\nThe easiest way to get started with the code is to [create your own fork](http://help.github.com/forking/) of this repository, and then clone your fork:\n\n\t$ git clone git@github.com:\u003cyou\u003e/modeshape.git\n\t$ cd modeshape\n\t$ git remote add upstream git://github.com/ModeShape/modeshape.git\n\t\nAt any time, you can pull changes from the upstream and merge them onto your master:\n\n\t$ git checkout master               # switches to the 'master' branch\n\t$ git pull upstream master          # fetches all 'upstream' changes and merges 'upstream/master' onto your 'master' branch\n\t$ git push origin                   # pushes all the updates to your fork, which should be in-sync with 'upstream'\n\nThe general idea is to keep your 'master' branch in-sync with the 'upstream/master'.\n\n## Building ModeShape\n\nThen, we use Maven 3.x to build our software. The following command compiles all the code, installs the JARs into your local Maven repository, and run all of the unit tests:\n\n\t$ mvn clean install -s settings.xml\n\nBTW, that '-s settings.xml' argument uses the 'settings.xml' file in our codebase, which is set up to use the JBoss Maven repository\n\nIf you are interested in building \u0026 contributing to the Wildfly kit as well, you need to run the following command (instead of the earlier command) \nto build all modules, including the Wildfly kit, using our \"integration\" profile:\n\n    $ mvn clean install -s settings.xml -Pintegration\n\nTo build everything, including the ModeShape kit for Wildfly, our JavaDoc, and our other assemblies, use the \"assembly\" profile instead:\n\n    $ mvn clean install -s settings.xml -Passembly\n\nAs an alternative to always passing the \"-s settings.xml\" parameter, you can modify your local ~/.m2/settings.xml file and add the above mentioned repositories, making sure they are active by default during a build.\n\nThat command takes a while -- we do have over 12K unit tests. So if need be, your builds can skip the tests:\n\n\t$ mvn clean install -s settings.xml -DskipTests\n\t\nIf you have *any* trouble building (or don't like the '-s settings.xml' usage), check the [detailed build instructions and tips](http://community.jboss.org/wiki/ModeShapeAndMaven).\n\n## Contribute fixes and features\n\nModeShape is licensed under the Apache License 2.0 (see the file LICENSE.txt or [http://www.apache.org/licenses/LICENSE-2.0.html]() for details).\n\nContributions to ModeShape are welcome. They must be completely authored by you, and you must have the right to contribute them (for example, if you are employed, you must have received the necessary permissions from your employer to make the contribution). All contributions to ModeShape must be licensed under the Apache License 2.0, just like the project itself.\n\nBefore committing anything, PLEASE make sure you have set up all of the development tools\n(see http://community.jboss.org/wiki/ModeShapeDevelopmentTools), are following the project's\nguidelines (see http://community.jboss.org/wiki/ModeShapeDevelopmentGuidelines), and are \nusing our accepted workflow (see http://community.jboss.org/wiki/ModeShapeDevelopmentWorkflow).\n\nIf you want to fix a bug or make any changes, please log an issue in the [ModeShape JIRA](https://issues.jboss.org/browse/MODE) describing the bug\nor new feature. Then we highly recommend making the changes on a topic branch named with the JIRA issue number. For example, this command creates\na branch for the MODE-1234 issue:\n\n\t$ git checkout -b mode-1234\n\nAfter you're happy with your changes and a full build (with unit tests) runs successfully, commit your changes on your topic branch\n(using [really good comments](http://community.jboss.org/wiki/ModeShapeDevelopmentGuidelines#Commits)). Then it's time to check for\nand pull any recent changes that were made in the official repository:\n\n\t$ git checkout master               # switches to the 'master' branch\n\t$ git pull upstream master          # fetches all 'upstream' changes and merges 'upstream/master' onto your 'master' branch\n\t$ git checkout mode-1234            # switches to your topic branch\n\t$ git rebase master                 # reapplies your changes on top of the latest in master\n\t                                      (i.e., the latest from master will be the new base for your changes)\n\nIf the pull grabbed a lot of changes, you should rerun your build to make sure your changes are still good.\nYou can then either [create patches](http://progit.org/book/ch5-2.html) (one file per commit, saved in `~/mode-1234`) with \n\n\t$ git format-patch -M -o ~/mode-1234 orgin/master\n\nand upload them to the JIRA issue, or you can push your topic branch and its changes into your public fork repository\n\n\t$ git push origin mode-1234         # pushes your topic branch into your public fork of ModeShape\n\nand [generate a pull-request](http://help.github.com/pull-requests/) for your changes. \n\nWe prefer pull-requests, because we can review the proposed changes, comment on them,\ndiscuss them with you, and likely merge the changes right into the official repository.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FModeShape%2Fmodeshape","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FModeShape%2Fmodeshape","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FModeShape%2Fmodeshape/lists"}