# core-lib/xjar

Spring Boot JAR 安全加密运行工具，支持的原生JAR。

Repository: https://github.com/core-lib/xjar
Canonical: https://ross.abutalabs.com/products/xjar
Language: Java
License: Apache-2.0
License Family: permissive
Topics: springboot, jar, encryption, decryption, classloader, aes, decompilation
Last push: 2024-04-25T01:35:41+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 2841, "days_push": 861, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1807, forks 502 (observed 2026-08-28T04:05:39.179969+00:00)

## What it is
XJar is a Java library and Maven-integrated tool that encrypts Spring Boot and plain JAR files (e.g., with AES) and provides a custom classloader to decrypt them in memory at runtime. It also generates a Go-based launcher binary that embeds tamper checking to keep the decryption password out of the JAR.

## Use cases
- encrypt a spring boot jar to prevent decompilation
- protect java source code from being extracted from a jar
- run an encrypted jar with in-memory decryption
- prevent reverse engineering of a java application
- generate a native launcher that hides the jar password
- encrypt only selected classes and resources in a jar

## When to choose
- you distribute Spring Boot or plain JARs to customers and want to deter decompilation and source leakage
- you want a no-code-change encryption step applied to an already-built JAR
- you need selectable include/exclude rules for which resources get encrypted

## When to avoid
- you need strong cryptographic protection against a determined attacker - runtime in-memory decryption can still be dumped
- your project is not JVM-based or runs on JDK below 1.7
- you need obfuscation rather than encryption - a Java obfuscator may fit better

## Facets
- artifact type: library
- maturity: active
- function: cryptography, security, build-tool
- domain: security, developer-tools
- platform: jvm, windows, cross-platform
- tags: jar-encryption, spring-boot, anti-decompilation, aes, maven-plugin, go-launcher, java, classloader, linux, macos

## Member repositories
- core-lib/xjar (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:39.179969+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:21:26.506927+00:00, confidence not recorded.
  - readme: https://github.com/core-lib/xjar (fetched 2026-08-28T04:05:39.179969+00:00, sha e2b3080952d2)
- Data as of 2026-08-30T08:39:29.467469+00:00.