apolloconfig/apollo
Apollo is a reliable configuration management system suitable for microservice configuration management scenarios.
29.8k stars · 10.1k forks · Java
Caution
Caution: the published package has not been released in two years.
Why
- The Maven package com.ctrip.framework.apollo:apollo has had no release since June 2022, while the repository has 100 human commits in the last year; the old release has 6 known security advisories (GHSA-368x-wmmg-hq5c, GHSA-4w3q-qpfq-v992, GHSA-c6c3-h4f7-3962), which do not show whether the current code is affected. (source 1, source 2, source 3, source 4, source 5, source 6, source 7, source 8)
What would change this
- A new package release is published.
Maintenance
CompleteActive
- Human commits, 30 days
- 17
- Human commits, 90 days
- 32
- Human commits, 365 days
- 100
- Bot share of commits, 365 days
- 2%
- Last commit
- Oct 11, 2026 (3 days ago)
- Last human commit
- Oct 11, 2026 (3 days ago)
- Authors, 90 days
- 8
- Last release
- Oct 3, 2026 (11 days ago)
- Median PR merge time
- 22 hours
Responsiveness: of 13 recent issues, 69% got a maintainer reply. Median first response: 42 hours.
Sources: Commits, Releases, Merged pull requests, Issues
People
Complete- Owner
- Organization
- Commits sampled
- 100 since Oct 14, 2025
- Authors for half of commits
- 1
- Authors for 80% of commits
- 6
- Contributors
- 184
Top committers
- nobodyiam: 58% of commits
- tacklequestions: 6% of commits
- arrow1991: 4% of commits
- klboke: 4% of commits
- youngzil: 4% of commits
Sources: Commits, Contributors
Stars
CompleteOrganic, confidence high
Bursts
- Sep 8, 2016 to Sep 9, 2016: about 19 more stars than usual, peak 15 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Jul 5, 2017 to Jul 7, 2017: about 74 more stars than usual, peak 39 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Aug 3, 2017 to Aug 7, 2017: about 135 more stars than usual, peak 63 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Sep 27, 2021 to Sep 28, 2021: about 126 more stars than usual, peak 110 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- 1 stars GitHub has since removed (tracked since Oct 14, 2026).
Anyone can buy stars for any repo; bursts alone don't prove the owner did.
- The star history looks organic.
Sources: How star history is analyzed
Risk
CompleteFlags
- Warning: The latest release of the Maven package com.ctrip.framework.apollo:apollo was published more than 24 months ago, while the repository has had 100 human commits in the last year (deps.dev); the old release has 6 known security advisories (GHSA-368x-wmmg-hq5c, GHSA-4w3q-qpfq-v992, GHSA-c6c3-h4f7-3962), which do not show whether the current code is affected. Details
License
- Now
- Apache-2.0 (OSI-approved)
- A year ago
- Apache-2.0 (OSI-approved)
Packages
- com.ctrip.framework.apollo:apollo (MAVEN): latest 2.0.1, published Jun 4, 2022
Advisories for the latest version: GHSA-368x-wmmg-hq5c (high), GHSA-4w3q-qpfq-v992 (high), GHSA-c6c3-h4f7-3962 (moderate), GHSA-fmxq-v8mg-qh25 (moderate), GHSA-h4pc-58cc-hc95 (high), GHSA-jxpj-9j24-w337 (moderate)
Package and advisory data: deps.dev and OSV.
Sources: GitHub: apolloconfig/apollo, deps.dev: Maven com.ctrip.framework.apollo:apollo, OSV: GHSA-368x-wmmg-hq5c, OSV: GHSA-4w3q-qpfq-v992, OSV: GHSA-c6c3-h4f7-3962, OSV: GHSA-fmxq-v8mg-qh25, OSV: GHSA-h4pc-58cc-hc95, OSV: GHSA-jxpj-9j24-w337
Badge
Add this to a README to show the current verdict:
[](https://reporadar.ai/apolloconfig/apollo)Earlier verdicts
- Oct 14, 2026: Caution
- Oct 14, 2026: Caution