apache/dubbo-erlang

Dubboerl is an Erlang-based implementation of the Apache Dubbo RPC framework, providing a bridge for Erlang services to communicate with Java-based Dubbo ecosystems. The system currently supports core RPC client functionality, including connection management, protocol encoding for Hessian and JSON, and extensible filtering and load balancing. Recent development has focused on solidifying the client-side architecture and addressing security vulnerabilities, indicating a shift toward stabilizing the integration layer for production use.

3 changes.

This period marked the initial release of dubboerl, an Erlang-based Dubbo framework, establishing the core project structure and adding an EUnit test suite to verify functionality. The work focused on delivering the first functional version of the framework with basic test coverage. Additionally, default configuration files were moved to an example directory to clarify their role as templates and prevent accidental overwriting.

7 changes.

This period focused on establishing a functional Erlang-Dubbo integration by developing a Java-to-Erlang interface generation tool and creating comprehensive demo services. The team expanded test coverage and defined necessary data structures to ensure reliable interoperability via Zookeeper and Hessian. Concurrently, the continuous integration pipeline was refactored to use a modular, custom shell script approach for improved build management.

1 change.

Introduced Maven project definitions for the \dubbo-sample-service\ and \erlanalysis\ modules. The sample service now depends on Dubbo version 2.7.15 and the Zookeeper metadata report version 2.7.2, while the analysis tool includes dependencies for Hessian, ASM, and Velocity to support its packaging and execution.

1 change.

This release introduces several new extension points for protocol, cluster, registry, loadbalance, and filter configurations, allowing for greater customization of the Dubbo Erlang implementation. It adds support for JSON serialization alongside the existing Hessian serializer and includes a new RpcContext transport. A bug fix ensures the protocol is correctly unexported when a service shuts down. Additionally, the project has migrated from Travis CI to Codecov for coverage reporting, replaced the lager logging library with the standard Erlang logger, and changed the license from MIT to Apache 2.0.

3 changes.

The period focused on introducing the core components for the Dubbo RPC client, including the default client implementation with heartbeat and reconnection logic, protocol codec for Hessian and JSON serialization, and an extension framework for pluggable filters and load balancing. Concurrently, efforts were made to address security vulnerabilities, although this resulted in a regression of five new findings despite no code commits being recorded.

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

• CAI 57 → 58 (+1.2)
• Rubric changed (rubric-2026.09.12 → rubric-2026.09.18) — scores are not directly comparable.

• Code Health 94 → 94 (-0.1)
• Architecture 100 → 100 (+0.0)
• Maturity 50 → 50 (+0.0)
• Readiness 39 → 43 (+4.0)
• Security 100 → 92 (-7.9)

• Coverage not measured — no coverage collector is wired up
• Dependency hygiene PARTLY measured — Maven/Gradle declarations read, no dependency graph resolved
• Documentation: no installation or build instructions (README.md)
• Documentation: no usage examples (README.md)
• Scanner failed to run — not a clean result
• Scanner failed to run — not a clean result

• Critical CVE: [GHSA redacted] (tools/erlanalysis/pom.xml)
• Critical CVE: [GHSA redacted] (tools/erlanalysis/pom.xml)
• Duplicated block (6 lines × 2) (tools/erlanalysis/src/main/java/org/apache/dubbo/erlang/analysis/generater/ErlProjectGenerater.java)
• Floating source dependency: dubboerl
• High CVE: [GHSA redacted] (tools/erlanalysis/pom.xml)
• High CVE: [GHSA redacted] (tools/erlanalysis/pom.xml)
• Medium CVE: [GHSA redacted] (tools/erlanalysis/pom.xml)
• Outdated: jsx

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

apache/dubbo-erlang was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.