Ross ROSS = Recommend OSS · open-source software intelligence for agents

esig/dss

Digital Signature Service : creation, extension and validation of advanced electronic signatures observed · 2026-08-28

github.com/esig/dss · homepage · Java · LGPL-2.1 (copyleft) observed · 2026-08-28

Health v2 · maintenance only

85/100

  • Activity 98
  • Release rhythm 61
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: 53
  • age_days: 4233
  • days_rel: 180
  • days_push: 15
  • n_releases_24m: 8

Full methodology

Adoption not part of the score

1025 stars · 409 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

DSS (Digital Signature Service) is an open-source Java library from the European Commission for creating, extending, and validating advanced electronic signatures (AdES). It supports XAdES, CAdES, PAdES, JAdES, and ASiC formats, plus revocation data handling, timestamping, and eIDAS-compliant signature validation with detailed reports.

Use cases

  • create PAdES signatures on PDF documents in Java
  • validate XAdES or CAdES signatures against eIDAS rules
  • extend a B-level signature to a higher AdES baseline level
  • verify qualified electronic signatures with trusted lists and revocation data
  • add RFC 3161 timestamps to documents or ASiC containers
  • build a signature validation web service for EU eIDAS compliance
  • extract the original document from a signed ASiC container
  • sign JSON payloads with JAdES

When to choose

  • you need standards-compliant eIDAS/ETSI electronic signature support in a Java application
  • you must validate signatures with full diagnostic reports and certificate chain/revocation checking
  • you need to support multiple signature formats (XML, CMS, PDF, JSON, ASiC) with one framework
  • you are building EU public-sector or e-invoicing software requiring qualified signature validation

When to avoid

  • you need a simple non-standard digital signature and a lighter crypto library suffices
  • your stack is not JVM-based (DSS is Java-only)
  • you want an end-user signing application rather than an embeddable library
  • you need a very small dependency footprint, as DSS is a large multi-module framework

Facets

library · maturity stable

security cryptography pdf serialization developer-tools security developer-tools pdf e-government legal jvm cross-platform electronic-signatures xades cades pades jades asic eidas signature-validation digital-signatures timestamps

9 sources

Member repositories

RepositoryRoleHealth v2
esig/dssmain85

For agents

markdown · JSON · MCP: product_card(name="esig/dss")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem