apache/dubbo
The java implementation of Apache Dubbo. An RPC and microservice framework.
41.6k stars · 26.3k forks · Java
Healthy
Healthy: maintained by 7 people in the last 90 days, no known risks.
Why
No rule fired.
What would change this
- A dormant maintenance status, a deprecated or archived package, a successor link, or a critical advisory would change this.
Maintenance
CompleteSlowing
- Human commits, 30 days
- 3
- Human commits, 90 days
- 8
- Human commits, 365 days
- 117
- Bot share of commits, 365 days
- 66%
- Last commit
- Oct 10, 2026 (4 days ago)
- Last human commit
- Oct 10, 2026 (4 days ago)
- Authors, 90 days
- 7
- Last release
- May 17, 2026 (5 months ago)
- Median PR merge time
- 7 days
Responsiveness: of 25 recent issues, 64% got a maintainer reply. Median first response: 39 hours.
- Most commits in the last year come from bots.
Sources: Commits, Releases, Merged pull requests, Issues
People
Complete- Owner
- Organization
- Commits sampled
- 117 since Oct 14, 2025
- Authors for half of commits
- 4
- Authors for 80% of commits
- 21
- Contributors
- 401
Top committers
- Anshul-creator: 25% of commits
- RainYuY: 11% of commits
- EarthChen: 9% of commits
- zrlw: 9% of commits
- LI123456mo: 3% of commits
Sources: Commits, Contributors
Stars
CompleteOrganic, confidence high
Bursts
- Aug 1, 2017 to Aug 4, 2017: about 236 more stars than usual, peak 108 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Nov 14, 2017 to Nov 17, 2017: about 369 more stars than usual, peak 164 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Dec 11, 2018 to Dec 13, 2018: about 216 more stars than usual, peak 188 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
- Jun 1, 2021 to Jun 3, 2021: about 94 more stars than usual, peak 81 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
- 73 stars on a repo created before February 2013 have no date, so they aren't in the chart.
- 1 stars GitHub has since removed (tracked since Oct 14, 2026).
Anyone can buy stars for any repo; bursts alone don't prove the owner did.
- The star history looks organic.
- 73 stars on the creation day are undated (before 2013-02-10) and are not counted.
Sources: How star history is analyzed
Risk
CompleteFlags
No risk flags.
License
- Now
- Apache-2.0 (OSI-approved)
- A year ago
- Apache-2.0 (OSI-approved)
Packages
- org.apache.dubbo:dubbo-parent (MAVEN): latest 3.3.6, published Oct 17, 2025
Advisories for the latest version: none listed
Package and advisory data: deps.dev and OSV.
OpenSSF Scorecard: 7.4 out of 10 (via deps.dev).
Sources: GitHub: apache/dubbo, deps.dev: Maven org.apache.dubbo:dubbo-parent
Badge
Add this to a README to show the current verdict:
[](https://reporadar.ai/apache/dubbo)Earlier verdicts
- Oct 14, 2026: Healthy
- Oct 14, 2026: Healthy
- Oct 13, 2026: Healthy