# momosecurity/rhizobia_J

JAVA安全SDK及编码规范

Repository: https://github.com/momosecurity/rhizobia_J
Canonical: https://ross.abutalabs.com/products/rhizobia_j
Language: Java
License: BSD-3-Clause
License Family: permissive
Topics: security, sdk, security-tools
Last push: 2020-10-13T13:12:09+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 2672, "days_push": 2150, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1062, forks 301 (observed 2026-08-28T04:03:26.122733+00:00)

## What it is
A Java security SDK from MOMO Security that provides utilities for SQL injection sanitisation, CSRF token handling, safe deserialization, SSRF whitelist checking, URL redirection validation, and crypto helpers (AES, RSA, ECDSA). It is accompanied by a Java secure coding specification wiki.

## Use cases
- sanitize user input to prevent SQL injection in Java apps
- add CSRF token protection to Java web endpoints
- safely deserialize untrusted Java objects
- validate outbound URLs against an SSRF whitelist
- encrypt and sign data with AES, RSA, or ECDSA in Java
- follow a Java secure coding standard when reviewing code

## When to choose
- you are building a Java backend and want reusable defensive security utilities
- you need vetted sanitizers for MySQL, Oracle, or DB2 queries
- you want a reference secure coding standard for Java teams

## When to avoid
- you need a full web application security framework like Spring Security
- you work outside the JVM ecosystem
- you need actively maintained releases with recent updates

## Facets
- artifact type: library
- maturity: maintenance
- function: security, sdk, cryptography, serialization
- domain: security, developer-tools, web-development
- platform: jvm
- tags: java-security, secure-coding, sql-injection, csrf, ssrf, deserialization, momo-security

## Member repositories
- momosecurity/rhizobia_J (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:26.122733+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:56:45.607595+00:00, confidence not recorded.
  - readme: https://github.com/momosecurity/rhizobia_J (fetched 2026-08-28T04:03:26.122733+00:00, sha 74e2454e4e97)
- Data as of 2026-08-30T08:39:29.467469+00:00.