FasterXML/jackson-dataformat-xml

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

https://github.com/FasterXML/jackson-dataformat-xml.git · scanned 2026-05-16 13:30 UTC (1 day, 5 hours ago) · 10 languages

7 findings (2 legacy + 5 scanner) 83rd percentile · Java · medium (20-100K LoC) Scanner says 100 (lower by 17)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 day, 8 hours ago · v1 · 7 findings from 2 sources. Findings combine the legacy security pipeline AND the multi-layer engine (atlas, wiring, flows, ranked) AND verified AI agent contributions.

JSON

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

All 302 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`pom.xml`	software	healthy	`pom.xml`
`README.md`	software	healthy	`README.md`
`SECURITY.md`	software	healthy	`SECURITY.md`
`ISSUE_TEMPLATE.md`	software	healthy	`.github/ISSUE_TEMPLATE.md`
`FUNDING.yml`	software	healthy	`.github/FUNDING.yml`
`dependabot.yml`	software	healthy	`.github/dependabot.yml`
`coverage-comment.yml`	software	healthy	`.github/workflows/coverage-comment.yml`
`main.yml`	software	healthy	`.github/workflows/main.yml`
`dep_build_v2.yml`	software	healthy	`.github/workflows/dep_build_v2.yml`
`dep_build_v3.yml`	software	healthy	`.github/workflows/dep_build_v3.yml`
`module-info.java`	software	healthy	`src/test/java/module-info.java`
`VersionInfoTest.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/VersionInfoTest.…`
`MediaItem.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/MediaItem.java`
`XmlTestUtil.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/XmlTestUtil.java`
`FeatureDefaultsTest.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/FeatureDefaultsT…`
`XmlMapperTest.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/XmlMapperTest.ja…`
`JDKSerializationForXMLMapperTest.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/JDKSerialization…`
`RoundtripContentTest.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/RoundtripContent…`
`MapperCopyTest.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/MapperCopyTest.j…`
`TestIssue47Attribute.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/adapters/TestIss…`
`JsonNodeMixedContent403Test.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/node/JsonNodeMix…`
`JsonNodeBasicDeserTest.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/node/JsonNodeBas…`
`RootElementWrap484Test.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/node/RootElement…`
`JsonNodeSerUnwrapped441Test.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/node/JsonNodeSer…`
`ElementWrapperCreator853Test.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/ElementWra…`
`XmlTextWithUnwrappedListTest.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/XmlTextWit…`
`NullConversionsSkipTest.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/NullConver…`
`TypeInfoOrder525Test.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/TypeInfoOr…`
`NumberDeserWithXMLTest.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/NumberDese…`
`RootElementNameValidation247Test.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/RootElemen…`
`EnumDeserTest.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/EnumDeserT…`
`TypeAttributeOrder242Test.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/TypeAttrib…`
`UntypedObjectDeserTest.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/UntypedObj…`
`XsiNilBasicTest.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/XsiNilBasi…`
`XmlNumberParsingGetType1433Test.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/XmlNumberP…`
`MapDeserializationTest.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/MapDeseria…`
`EmptyStringValueTest.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/EmptyStrin…`
`EmptyWithScalarsTest.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/EmptyWithS…`
`XmlTextWithEmpty449Test.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/XmlTextWit…`
`SimpleStringValuesTest.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/SimpleStri…`
`StrictDuplicateDetection114Test.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/StrictDupl…`
`RootValueDeserTest.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/RootValueD…`
`MapWithDupsDeser498Test.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/MapWithDup…`
`XmlTextWhitespace565Test.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/XmlTextWhi…`
`UnexpectedNonWhitespaceText509Test.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/Unexpected…`
`ElementWrapperViaCreator149Test.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/ElementWra…`
`ElementWrapperWithCreator795Test.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/ElementWra…`
`UnwrappedListWithJsonUnwrapped762Test.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/UnwrappedL…`
`XmlClassDeser735Test.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/XmlClassDe…`
`DefaultTyping325Test.java`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/DefaultTyp…`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`.github`	software	healthy	`.github`
`workflows`	software	healthy	`.github/workflows`
`src`	software	healthy	`src`
`test`	software	healthy	`src/test`
`java`	software	healthy	`src/test/java`
`tools`	software	healthy	`src/test/java/tools`
`jackson`	software	healthy	`src/test/java/tools/jackson`
`dataformat`	software	healthy	`src/test/java/tools/jackson/dataformat`
`xml`	software	healthy	`src/test/java/tools/jackson/dataformat/xml`
`adapters`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/adapters`
`node`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/node`
`deser`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser`
`creator`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/creator`
`records`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/records`
`builder`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/builder`
`convert`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/deser/convert`
`testutil`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/testutil`
`failure`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/testutil/failure`
`woodstox`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/woodstox`
`jaxb`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/jaxb`
`fuzz`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/fuzz`
`lists`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/lists`
`ser`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/ser`
`tofix`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/tofix`
`incr`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/incr`
`jdk17`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/jdk17`
`dos`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/dos`
`stream`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/stream`
`records`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/records`
`vld`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/vld`
`misc`	software	healthy	`src/test/java/tools/jackson/dataformat/xml/misc`
`main`	software	healthy	`src/main`
`java`	software	healthy	`src/main/java`
`tools`	software	healthy	`src/main/java/tools`
`jackson`	software	healthy	`src/main/java/tools/jackson`
`dataformat`	software	healthy	`src/main/java/tools/jackson/dataformat`
`xml`	software	healthy	`src/main/java/tools/jackson/dataformat/xml`
`deser`	software	healthy	`src/main/java/tools/jackson/dataformat/xml/deser`
`util`	software	healthy	`src/main/java/tools/jackson/dataformat/xml/util`
`ser`	software	healthy	`src/main/java/tools/jackson/dataformat/xml/ser`
`annotation`	software	healthy	`src/main/java/tools/jackson/dataformat/xml/annotation`

Label	Layer	Status	Path
`MAVEN_GPG_PASSPHRASE`	cicd	healthy	`—`
`MAVEN_GPG_PRIVATE_KEY`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`
`CENTRAL_DEPLOY_USERNAME`	cicd	healthy	`—`
`CODECOV_TOKEN`	cicd	healthy	`—`
`CENTRAL_DEPLOY_PASSWORD`	cicd	healthy	`—`

Label	Layer	Status	Path
`gha::coverage-comment`	cicd	healthy	`.github/workflows/coverage-comment.yml`
`gha::main`	cicd	healthy	`.github/workflows/main.yml`
`gha::dep_build_v2`	cicd	healthy	`.github/workflows/dep_build_v2.yml`
`gha::dep_build_v3`	cicd	healthy	`.github/workflows/dep_build_v3.yml`

Label	Layer	Status	Path
`comment`	cicd	healthy	`.github/workflows/coverage-comment.yml`
`build`	cicd	healthy	`.github/workflows/main.yml`
`build`	cicd	healthy	`.github/workflows/dep_build_v2.yml`
`build`	cicd	healthy	`.github/workflows/dep_build_v3.yml`

Label	Layer	Status	Path
`repobility-clone-r111ruxv`	software	healthy	`/tmp/repobility-clone-r111ruxv`

{# ── 2026-05-17 Round 14: AI-agent bridge footer ────────────────────── Discoverability: the /agents/voting/ guide + MCP manifest exist but aren't linked from anywhere users actually land. Small, opt-in footer. #}

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/d5290845-7168-40ce-8287-63bce1d3355a/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/d5290845-7168-40ce-8287-63bce1d3355a/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

FasterXML/jackson-dataformat-xml

Complete repo analysis

file 50+

directory 41

env_var 6

pipeline 4

job 4

repo 1