{"id":46015989,"url":"https://github.com/ongres/stringprep","last_synced_at":"2026-03-01T01:09:58.380Z","repository":{"id":71788322,"uuid":"92693907","full_name":"ongres/stringprep","owner":"ongres","description":"Stringprep (RFC 3454) Java implementation","archived":false,"fork":false,"pushed_at":"2026-01-01T17:28:07.000Z","size":548,"stargazers_count":3,"open_issues_count":0,"forks_count":2,"subscribers_count":2,"default_branch":"main","last_synced_at":"2026-01-06T23:52:49.074Z","etag":null,"topics":["java","nameprep","rfc3454","rfc3491","rfc4013","saslprep","stringprep"],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-2-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/ongres.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2017-05-28T23:50:20.000Z","updated_at":"2026-01-01T17:28:05.000Z","dependencies_parsed_at":"2024-06-01T12:25:00.798Z","dependency_job_id":"5e970977-5e47-4b45-89fe-27684c1e8fa8","html_url":"https://github.com/ongres/stringprep","commit_stats":null,"previous_names":[],"tags_count":5,"template":false,"template_full_name":null,"purl":"pkg:github/ongres/stringprep","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ongres%2Fstringprep","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ongres%2Fstringprep/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ongres%2Fstringprep/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ongres%2Fstringprep/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ongres","download_url":"https://codeload.github.com/ongres/stringprep/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ongres%2Fstringprep/sbom","scorecard":{"id":1239408,"data":{"date":"2025-11-01T18:30:32Z","repo":{"name":"github.com/ongres/stringprep","commit":"ae3d21e70cc030b6e4548527093d934b54c8a00f"},"scorecard":{"version":"v5.3.0","commit":"c22063e786c11f9dd714d777a687ff7c4599b600"},"score":8.1,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/6 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#code-review"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#dependency-update-tool"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:31","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:32","Info: jobLevel 'packages' permission set to 'read': .github/workflows/codeql.yml:28","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/maven.yml:33","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/maven.yml:13","Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:18"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#token-permissions"}},{"name":"Maintained","score":10,"reason":"14 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":9,"reason":"dependency not pinned by hash detected -- score normalized to 9","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/scorecard.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/ongres/stringprep/scorecard.yml/main?enable=pin","Info:   9 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   2 out of   2 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#cii-best-practices"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (28) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#sast"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#signed-releases"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 2-Clause \"Simplified\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#license"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#branch-protection"}},{"name":"Contributors","score":10,"reason":"project has 3 contributing companies or organizations -- score normalized to 10","details":["Info: found contributions from: jugnicaragua, ongres, pgjdbc"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#contributors"}},{"name":"CI-Tests","score":10,"reason":"14 out of 14 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#ci-tests"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c22063e786c11f9dd714d777a687ff7c4599b600/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-11-01T20:29:55.735Z","repository_id":71788322,"created_at":"2025-11-01T20:29:55.735Z","updated_at":"2025-11-01T20:29:55.735Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29957128,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-28T22:53:01.873Z","status":"ssl_error","status_checked_at":"2026-02-28T22:52:50.699Z","response_time":90,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["java","nameprep","rfc3454","rfc3491","rfc4013","saslprep","stringprep"],"created_at":"2026-03-01T01:09:57.654Z","updated_at":"2026-03-01T01:09:58.321Z","avatar_url":"https://github.com/ongres.png","language":"Java","readme":"# Stringprep (RFC 3454) Java implementation\n\n![Maven Central Version](https://img.shields.io/maven-central/v/com.ongres.stringprep/stringprep-aggregator)\n[![Reproducible Builds](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/jvm-repo-rebuild/reproducible-central/master/content/com/ongres/stringprep/badge.json)](https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/com/ongres/stringprep/README.md)\n![GitHub License](https://img.shields.io/github/license/ongres/stringprep)\n\n\u003e Preparation of Internationalized Strings (\"stringprep\")\n\n## Overview\n\nThis project implements the [RFC 3454](https://tools.ietf.org/html/rfc3454) Preparation of Internationalized Strings (\"stringprep\") in pure Java.\n\n[![Maven Central](https://img.shields.io/badge/maven--central-stringprep-informational?style=for-the-badge\u0026logo=apache-maven\u0026logoColor=red)](https://maven-badges.herokuapp.com/maven-central/com.ongres.stringprep/stringprep)\n\nThe stringprep protocol does not stand on its own; it has to be used by other protocols at precisely-defined places in those other protocols.\n\n## Profiles\n\n### SASLprep (RFC 4013)\n\n`SASLprep` is a profile of stringprep for user names and passwords ([RFC 4013](https://tools.ietf.org/html/rfc4013)).\n\nImport Maven dependency:\n\n[![Maven Central](https://img.shields.io/badge/maven--central-saslprep-informational?style=for-the-badge\u0026logo=apache-maven\u0026logoColor=red)](https://maven-badges.herokuapp.com/maven-central/com.ongres.stringprep/saslprep)\n\n```xml\n\u003cdependency\u003e\n  \u003cgroupId\u003ecom.ongres.stringprep\u003c/groupId\u003e\n  \u003cartifactId\u003esaslprep\u003c/artifactId\u003e\n  \u003cversion\u003e2.2\u003c/version\u003e\n\u003c/dependency\u003e\n```\n\n### Nameprep (RFC 3491)\n\n`Nameprep` is a Stringprep Profile for Internationalized Domain Names (IDN) ([RFC 3491](https://tools.ietf.org/html/rfc3491)).\n\nImport Maven dependency:\n\n[![Maven Central](https://img.shields.io/badge/maven--central-nameprep-informational?style=for-the-badge\u0026logo=apache-maven\u0026logoColor=red)](https://maven-badges.herokuapp.com/maven-central/com.ongres.stringprep/nameprep)\n\n```xml\n\u003cdependency\u003e\n  \u003cgroupId\u003ecom.ongres.stringprep\u003c/groupId\u003e\n  \u003cartifactId\u003enameprep\u003c/artifactId\u003e\n  \u003cversion\u003e2.2\u003c/version\u003e\n\u003c/dependency\u003e\n```\n\n## Usage\n\nThe normal usage is to import the dependency of the Stringprep profile to use, and lookup the provider service that contains the profile.\n\n### Example:\nImport the `SASLprep` dependency, this transitively imports the `Stringprep` dependency.\n```xml\n\u003cdependency\u003e\n  \u003cgroupId\u003ecom.ongres.stringprep\u003c/groupId\u003e\n  \u003cartifactId\u003esaslprep\u003c/artifactId\u003e\n  \u003cversion\u003e2.2\u003c/version\u003e\n\u003c/dependency\u003e\n```\n\nGet the `SASLprep` provider service:\n```java\nProfile saslPrep = Stringprep.getProvider(\"SASLprep\");\nString prepared = saslPrep.prepareStored(\"I\\u00ADX \\u2168\");\nprepared.equals(\"IX IX\"); // true\n```\n\nYou could also (only) use the stringprep dependency to create your own profiles by implementing the `Profile` interface, just override the `profile()` method with the set of options.\n\nAnonymous on-the-fly profile usage:\n```java\nProfile saslPrep = () -\u003e EnumSet.of(Option.NORMALIZE_KC, Option.MAP_TO_NOTHING);\nString prepared = saslPrep.prepareStored(\"I\\u00ADX ⑳\");\nprepared.equals(\"IX 20\"); // true\n```\n\n\u003e Please note that when two protocols that use different profiles of stringprep interoperate, there may be conflict about what characters are and are not allowed in the final string.  Thus, protocol developers should strongly consider re-using existing profiles of stringprep.\n\n### Java Modules (JPMS):\nThe Stringprep and profiles implementation are explicit Java modules with the names:\n\n* `com.ongres.stringprep`\n* `com.ongres.saslprep`\n* `com.ongres.nameprep`\n\nIf you depend on a specific profile (`saslprep` or `nameprep`) there is an implied readability on `stringprep`, so you will only need to declare in your `module-info.java` the profile module and get the service from the provider.\n\nExample `module-info.java`:\n```java\nmodule test.app {\n  requires com.ongres.saslprep;\n}\n```\n\n## Goals\n\nThis project aims to provide a implementation of these algorithms.\nIt is written in Java and provided in a modular, re-usable way, independent of other software or programs.\n\nCurrent functionality includes:\n\n* Parsers with the different steps for preparing string. The data is obtained from files with the rules of the RFC.\n* Provide a `Profile` interface working as the base for implementing different profiles of Stringprep.\n* Include the preparation of two types of strings \"stored strings\" and \"queries\".\n* `SASLprep` profile with the specific options of Stringprep.\n* `Nameprep` profile with the specific options of Stringprep.\n* Tests with the RFC example and several tests of each steps.\n* Multi-release Modular JARs, compatible with Java 8+.\n* Zero-depdency, each profile depends only on the Stringprep module.\n* New Stringprep profiles could be implemented easily and even \"on-the-fly\".\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fongres%2Fstringprep","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fongres%2Fstringprep","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fongres%2Fstringprep/lists"}