{"id":3655,"url":"https://github.com/google/guava","last_synced_at":"2026-10-18T21:22:01.483Z","repository":{"id":17512239,"uuid":"20300177","full_name":"google/guava","owner":"google","description":"Google core libraries for Java","archived":false,"fork":false,"pushed_at":"2026-10-16T21:08:56.000Z","size":1430575,"stargazers_count":51922,"open_issues_count":759,"forks_count":11211,"subscribers_count":2325,"default_branch":"master","last_synced_at":"2026-10-17T06:53:19.723Z","etag":null,"topics":["guava","java"],"latest_commit_sha":null,"homepage":"https://guava.dev/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2014-05-29T16:23:17.000Z","updated_at":"2026-10-17T04:13:53.000Z","dependencies_parsed_at":"2026-10-02T01:52:26.464Z","dependency_job_id":null,"html_url":"https://github.com/google/guava","commit_stats":{"total_commits":6662,"total_committers":466,"mean_commits":"14.296137339055795","dds":0.6975382767937557,"last_synced_commit":"2f04514087a61201dc477ecf9c4f078ec14698a9"},"previous_names":[],"tags_count":124,"template":false,"template_full_name":null,"purl":"pkg:github/google/guava","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fguava","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fguava/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fguava/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fguava/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/guava/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Fguava/sbom","scorecard":{"id":437161,"data":{"date":"2025-08-17T09:48:18Z","repo":{"name":"github.com/google/guava","commit":"869a75a1e3ff85d36672a3cd154772dc90c7b3d2"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":8.8,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Warn: jobLevel 'actions' permission set to 'write': .github/workflows/ci.yml:17","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:18","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/ci.yml:98","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:12","Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:18"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: integration-tests/gradle/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:   9 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   3 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/google/.github/SECURITY.md:1","Info: Found linked content: github.com/google/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/google/.github/SECURITY.md:1","Info: Found text in security policy: github.com/google/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"CI-Tests","score":10,"reason":"30 out of 30 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 11 contributing companies or organizations","details":["Info: found contributions from: GoogleCloudPlatform, applied intuition, chainlinklabs, diffplug, google, google inc, googlers, kobjects, openjdk, sainsbury's, vercel"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}}]},"last_synced_at":"2025-08-19T04:57:30.372Z","repository_id":17512239,"created_at":"2025-08-19T04:57:30.372Z","updated_at":"2025-08-19T04:57:30.372Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":344872684,"owners_count":38333355,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-17T02:00:06.547Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["guava","java"],"created_at":"2024-01-05T20:16:47.654Z","updated_at":"2026-10-18T21:22:01.475Z","avatar_url":"https://github.com/google.png","language":"Java","funding_links":[],"categories":["Java Tools, Libraries, and Frameworks","Tools","Java Tools and Frameworks","Java Tools","Java","语言篇","Libraries","Java Tools \u0026 Frameworks","HarmonyOS","Projects","Awesome-Java [![awesome-go-Status-Image](https://travis-ci.org/avelino/awesome-go.svg?branch=master)](https://travis-ci.org/avelino/awesome-go) [![996.icu](https://img.shields.io/badge/link-996.icu-red.svg)](https://996.icu)","Tool","常用框架\\\u0026第三方库","Utility Libraries","[Programming]","Java (78)","Utility","dependency list","项目","工具集","Awesome Tools","I. Development","库","工具库","Technologies we used in the Microservices","\u003ca name=\"Java\"\u003e\u003c/a\u003eJava","Solutions","General-purpose libraries"],"sub_categories":["Interfaces","VS Code Extensions for Developer Productivity","E-Books","Objective-C Tools, Libraries, and Frameworks","JavaScript Libraries for Machine Learning","Mesh networks","Java","Other","In-memory data grids","Windows Manager","Utility","Common Utils/Code Quality","Utilities","[Programming] - [Java]","实用程序","计算机基础-java","Languages","1. Common frameworks and libraries","实用工具","Core Libraries","Core Java Libraries","[](https://github.com/JStumpp/awesome-android/blob/master/readme.md#other)其他"],"readme":"# Guava: Google Core Libraries for Java\n\n[![GitHub Release](https://img.shields.io/github/v/release/google/guava)](https://github.com/google/guava/releases/latest)\n[![CI](https://github.com/google/guava/actions/workflows/ci.yml/badge.svg)](https://github.com/google/guava/actions/workflows/ci.yml)\n[![OpenSSF Best Practices](https://www.bestpractices.dev/projects/7197/badge)](https://www.bestpractices.dev/projects/7197)\n\n\n\nGuava is a set of core Java libraries from Google that includes new collection\ntypes (such as multimap and multiset), immutable collections, a graph library,\nand utilities for concurrency, I/O, hashing, primitives, strings, and more! It\nis widely used on most Java projects within Google, and widely used by many\nother companies as well.\n\n\n\nGuava comes in two flavors:\n\n*   The JRE flavor requires JDK 1.8 or higher.\n*   If you need support for Android, use\n    [the Android flavor](https://github.com/google/guava/wiki/Android). You can\n    find the Android Guava source in the [`android` directory].\n\n[`android` directory]: https://github.com/google/guava/tree/master/android\n\n## Adding Guava to your build\n\nGuava's Maven group ID is `com.google.guava`, and its artifact ID is `guava`.\nGuava provides two different \"flavors\": one for use on a (Java 8+) JRE and one\nfor use on Android or by any library that wants to be compatible with Android.\nThese flavors are specified in the Maven version field as either `33.7.1-jre` or\n`33.7.1-android`. For more about depending on Guava, see\n[using Guava in your build].\n\nTo add a dependency on Guava using Maven, use the following:\n\n```xml\n\u003cdependency\u003e\n  \u003cgroupId\u003ecom.google.guava\u003c/groupId\u003e\n  \u003cartifactId\u003eguava\u003c/artifactId\u003e\n  \u003cversion\u003e33.7.1-jre\u003c/version\u003e\n  \u003c!-- or, for Android: --\u003e\n  \u003cversion\u003e33.7.1-android\u003c/version\u003e\n\u003c/dependency\u003e\n```\n\nTo add a dependency using Gradle:\n\n```gradle\ndependencies {\n  // Pick one:\n\n  // 1. Use Guava in your implementation only:\n  implementation(\"com.google.guava:guava:33.7.1-jre\")\n\n  // 2. Use Guava types in your public API:\n  api(\"com.google.guava:guava:33.7.1-jre\")\n\n  // 3. Android - Use Guava in your implementation only:\n  implementation(\"com.google.guava:guava:33.7.1-android\")\n\n  // 4. Android - Use Guava types in your public API:\n  api(\"com.google.guava:guava:33.7.1-android\")\n}\n```\n\nFor more information on when to use `api` and when to use `implementation`,\nconsult the\n[Gradle documentation on API and implementation separation](https://docs.gradle.org/current/userguide/java_library_plugin.html#sec:java_library_separation).\n\n## Snapshots and Documentation\n\nSnapshots of Guava built from the `master` branch are available through Maven\nusing version `999.0.0-HEAD-jre-SNAPSHOT`, or `999.0.0-HEAD-android-SNAPSHOT`\nfor the Android flavor.\n\n[Snapshot API Javadoc][guava-snapshot-api-docs] as well as\n[Snapshot API Diffs][guava-snapshot-api-diffs] are also available.\n\nAnother easy way to get to the Javadoc is to open\n[guava.dev/api](https://guava.dev/api). You can also jump right to a specific\nclass by appending the class name to guava.dev. For example,\n[guava.dev/ImmutableList](https://guava.dev/ImmutableList)!\n\n## Learn about Guava\n\n-   Our users' guide, [Guava Explained]\n-   [A nice collection](https://www.tfnico.com/presentations/google-guava) of\n    other helpful links\n\n## Links\n\n-   [GitHub project](https://github.com/google/guava)\n-   [Issue tracker: Report a defect or feature request](https://github.com/google/guava/issues/new)\n-   [StackOverflow: Ask \"how-to\" and \"why-didn't-it-work\" questions](https://stackoverflow.com/questions/ask?tags=guava+java)\n-   [guava-announce: Announcements of releases and upcoming significant changes](https://groups.google.com/group/guava-announce)\n-   [guava-discuss: For open-ended questions and discussion](https://groups.google.com/group/guava-discuss)\n\n## IMPORTANT WARNINGS\n\n1.  APIs marked with the `@Beta` annotation at the class or method level are\n    subject to change. They can be modified in any way, or even removed, at any\n    time. If your code is a library itself (i.e., it is used on the CLASSPATH of\n    users outside your own control), you should not use beta APIs unless you\n    [repackage] them. **If your code is a library, we strongly recommend using\n    the [Guava Beta Checker] to ensure that you do not use any `@Beta` APIs!**\n\n2.  APIs without `@Beta` will remain binary-compatible for the indefinite\n    future. (Previously, we sometimes removed such APIs after a deprecation\n    period. The last release to remove non-`@Beta` APIs was Guava 21.0.) Even\n    `@Deprecated` APIs will remain (again, unless they are `@Beta`). We have no\n    plans to start removing things again, but officially, we're leaving our\n    options open in case of surprises (like, say, a serious security problem).\n\n3.  Guava has one dependency that is needed for linkage at runtime:\n    `com.google.guava:failureaccess:1.0.3`. It also has\n    [some annotation-only dependencies][guava-deps], which we discuss in more\n    detail at that link.\n\n4.  Serialized forms of ALL objects are subject to change unless noted\n    otherwise. Do not persist these and assume they can be read by a future\n    version of the library.\n\n5.  Our classes are not designed to protect against a malicious caller. You\n    should not use them for communication between trusted and untrusted code.\n\n6.  For the mainline flavor, we test the libraries using a range of OpenJDK\n    versions on Linux and Windows. Some features, especially in\n    `com.google.common.io`, may not work correctly in non-Linux environments.\n    For the Android flavor, our unit tests also run on API level 24 (Nougat).\n\n[guava-snapshot-api-docs]: https://guava.dev/releases/snapshot-jre/api/docs/\n[guava-snapshot-api-diffs]: https://guava.dev/releases/snapshot-jre/api/diffs/\n[Guava Explained]: https://github.com/google/guava/wiki/Home\n[Guava Beta Checker]: https://github.com/google/guava-beta-checker\n\n\u003c!-- References --\u003e\n\n[using Guava in your build]: https://github.com/google/guava/wiki/UseGuavaInYourBuild\n[repackage]: https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-if-i-want-to-use-beta-apis-from-a-library-that-people-use-as-a-dependency\n[guava-deps]: https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgoogle%2Fguava","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgoogle%2Fguava","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgoogle%2Fguava/lists"}