{"id":18153219,"url":"https://github.com/xdev-software/prometheus-metrics-exposition-formats-no-protobuf","last_synced_at":"2025-08-22T11:31:22.790Z","repository":{"id":259819989,"uuid":"877170213","full_name":"xdev-software/prometheus-metrics-exposition-formats-no-protobuf","owner":"xdev-software","description":"Reconfigures prometheus-metrics-exposition-formats to remove protobuf","archived":false,"fork":false,"pushed_at":"2025-08-17T04:20:03.000Z","size":762,"stargazers_count":2,"open_issues_count":5,"forks_count":0,"subscribers_count":1,"default_branch":"develop","last_synced_at":"2025-08-18T01:37:47.400Z","etag":null,"topics":["actuator","eol","prometheus-metrics-exposition-formats","protobuf","spring","spring-boot"],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/xdev-software.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2024-10-23T07:57:13.000Z","updated_at":"2025-08-11T03:30:27.000Z","dependencies_parsed_at":"2024-10-28T06:54:00.062Z","dependency_job_id":"f44dd2c1-5d7b-4da0-9c50-c8bfa3edd2ac","html_url":"https://github.com/xdev-software/prometheus-metrics-exposition-formats-no-protobuf","commit_stats":null,"previous_names":["xdev-software/prometheus-metrics-exposition-formats-no-protobuf"],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/xdev-software/prometheus-metrics-exposition-formats-no-protobuf","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/xdev-software%2Fprometheus-metrics-exposition-formats-no-protobuf","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/xdev-software%2Fprometheus-metrics-exposition-formats-no-protobuf/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/xdev-software%2Fprometheus-metrics-exposition-formats-no-protobuf/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/xdev-software%2Fprometheus-metrics-exposition-formats-no-protobuf/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/xdev-software","download_url":"https://codeload.github.com/xdev-software/prometheus-metrics-exposition-formats-no-protobuf/tar.gz/refs/heads/develop","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/xdev-software%2Fprometheus-metrics-exposition-formats-no-protobuf/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":271629578,"owners_count":24793154,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-22T02:00:08.480Z","response_time":65,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["actuator","eol","prometheus-metrics-exposition-formats","protobuf","spring","spring-boot"],"created_at":"2024-11-02T03:06:03.466Z","updated_at":"2025-08-22T11:31:22.783Z","avatar_url":"https://github.com/xdev-software.png","language":"Java","funding_links":[],"categories":[],"sub_categories":[],"readme":"[![Latest version](https://img.shields.io/maven-central/v/software.xdev/prometheus-metrics-exposition-formats-no-protobuf?logo=apache%20maven)](https://mvnrepository.com/artifact/software.xdev/prometheus-metrics-exposition-formats-no-protobuf)\n[![Build](https://img.shields.io/github/actions/workflow/status/xdev-software/prometheus-metrics-exposition-formats-no-protobuf/check-build.yml?branch=develop)](https://github.com/xdev-software/prometheus-metrics-exposition-formats-no-protobuf/actions/workflows/check-build.yml?query=branch%3Adevelop)\n\n# prometheus-metrics-exposition-formats-no-protobuf\n\nReconfigures [prometheus-metrics-exposition-formats](https://github.com/prometheus/client_java) to remove [protobuf](https://github.com/protocolbuffers/protobuf).\n\nThis module is designed to integrate with [Spring Boot Actuator (Prometheus)](https://docs.spring.io/spring-boot/api/rest/actuator/prometheus.html) or similar services.\n\n### Why remove Protobuf?\n\n1. [Prometheus Protobuf format is obsolete/experimental](https://github.com/prometheus/docs/blob/main/content/docs/instrumenting/exposition_formats.md#protobuf-format), the chance that it's used is near 0\n2. The additional library can result in additional attack vectors. For example in [CVE-2024-7254](https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-735f-pc8j-v9w8)\n    * If the dependency is [reshaded](https://maven.apache.org/plugins/maven-shade-plugin/) it may not be detected by vulnerability scanners (as is the case in ``io.prometheus:prometheus-metrics-exposition-formats \u003c= 1.3.1``)\n3. The protobuf dependency is huge (around 10x bigger) in comparison to the other libraries\n\n_See also [prometheus/client_java#1173](https://github.com/prometheus/client_java/issues/1173)_\n\n## Installation\n[Installation guide for the latest release](https://github.com/xdev-software/prometheus-metrics-exposition-formats-no-protobuf/releases/latest#Installation)\n\n### Compatibility with ``io.prometheus:prometheus-metrics-exposition-formats``\n\n| ``io.prometheus:prometheus-metrics-exposition-formats`` version | ``prometheus-metrics-exposition-formats-no-protobuf`` version |\n| --- | --- |\n| 1.3.4+ | [``3`` (optional)](./CHANGELOG.md#300) |\n| 1.3.2+ | ``2`` |\n| \u003c 1.3.2 | ``1`` |\n\n### Spring Boot Actuator\n\n```xml\n\u003cdependencyManagement\u003e\n    \u003cdependencies\u003e\n        \u003cdependency\u003e\n            \u003cgroupId\u003eorg.springframework.boot\u003c/groupId\u003e\n            \u003cartifactId\u003espring-boot-dependencies\u003c/artifactId\u003e\n            \u003cversion\u003e...\u003c/version\u003e\n            \u003ctype\u003epom\u003c/type\u003e\n            \u003cscope\u003eimport\u003c/scope\u003e\n        \u003c/dependency\u003e\n    \u003c/dependencies\u003e\n\u003c/dependencyManagement\u003e\n\n\u003cdependencies\u003e\n    \u003cdependency\u003e\n        \u003cgroupId\u003esoftware.xdev\u003c/groupId\u003e\n        \u003cartifactId\u003eprometheus-metrics-exposition-formats-no-protobuf\u003c/artifactId\u003e\n        \u003cversion\u003e...\u003c/version\u003e\n        \u003cscope\u003eruntime\u003c/scope\u003e\n    \u003c/dependency\u003e\n\n    \u003cdependency\u003e\n        \u003cgroupId\u003eio.micrometer\u003c/groupId\u003e\n        \u003cartifactId\u003emicrometer-registry-prometheus\u003c/artifactId\u003e\n        \u003cexclusions\u003e\n            \u003c!-- Exclude default module so that dependency is properly removed --\u003e\n            \u003cexclusion\u003e\n                \u003cgroupId\u003eio.prometheus\u003c/groupId\u003e\n                \u003cartifactId\u003eprometheus-metrics-exposition-formats\u003c/artifactId\u003e\n            \u003c/exclusion\u003e\n        \u003c/exclusions\u003e\n        \u003cscope\u003eruntime\u003c/scope\u003e\n    \u003c/dependency\u003e\n\u003c/dependencies\u003e\n```\n\n## Support\nIf you need support as soon as possible and you can't wait for any pull request, feel free to use [our support](https://xdev.software/en/services/support).\n\n## Contributing\nSee the [contributing guide](./CONTRIBUTING.md) for detailed instructions on how to get started with our project.\n\n## Dependencies and Licenses\nView the [license of the current project](LICENSE) or the [summary including all dependencies](https://xdev-software.github.io/prometheus-metrics-exposition-formats-no-protobuf/dependencies)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fxdev-software%2Fprometheus-metrics-exposition-formats-no-protobuf","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fxdev-software%2Fprometheus-metrics-exposition-formats-no-protobuf","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fxdev-software%2Fprometheus-metrics-exposition-formats-no-protobuf/lists"}