New: Support latest install4j v.13 (Issue #21) Changes: Requires sbt 1.9 or newer, for older sbt 1.x use version 1.5.0 Published through the Sonatype Central Portal, in Maven-compatible plugin layo...

Automatic production profiling for JVMs. Contribute to jvmguard/jvmguard development by creating an account on GitHub.

Exciting times for the HotSpot JVM: was just proposed for Java 28. This promises to give the HotSpot AOT cache a startup performance that will rival GraalVM, without any of its hardships. But training the AOT cache is different from pre-compilation with GraalVM, so how do they really compare?JEP 544: Ahead-of-Time Code Compilation

On December 11, 2027, the SBOM obligations of the EU Cyber Resilience Act start applying. This means that you will soon need an SBOM if you want to ship software in the EU. It's not just the EU, but a global trend of enforcing supply-chain security with this declarative approach: The US has required SBOMs for federal software vendors since 2021, and CISA/NSA/FBI published updated SBOM minimum elements in July of this year.Getting an SBOM correct is not easy, and it becomes even harder when you ship installers for your software. What should you do now? Let's take a look.

Recently, I have been comparing , and for binary payloads, I have become a big fan of Apache Fory which promises to be "blazingly-fast" on its , and it really is. In the comparisons, I have differentiated between JSON and binary payloads. Jackson was the king of JSON serialization (also for Kotlin), while .Java serialization frameworksweb siteApache Fory dominated for binary payloadsIn the recent 1.7.0 release of Apache Fory, JSON support was added as the main new feature. So naturally, I was very curious and added Fory JSON to my . When I saw the numbers for my payload, I couldn't believe them: Fory was actually . Something was wrong here, and I decided to get to the bottom of it.serialization demo2.8 times slower than Jackson

Highlights support writing long values as strings for java json serialization encode byte arrays as base64 JSON strings by default for java json serialization Features feat(xlang): expand field ...

Read about the new features of install4j

In the , I profiled Java serialization frameworks and found that Apache Fory beats Java serialization and other contenders by a huge margin. This generated some interest in the question, how the Kotlin frameworks compare. The Kotlin ecosystem has its own serialization libraries, most notably , the official JetBrains library with compile-time code generation, and with its KSP-based adapter generation. Surely generated code beats the reflection-heavy Java options like ?previous postkotlinx.serializationMoshiJacksonTo find out, I extended the with an equivalent Kotlin data model and profiled round trips with JProfiler. The answer is that the language of your model classes does not matter a lot. However, there are some really surprising finds.comparison project

It's no secret that the JDK architects seriously dislike Java serialization. It's a security nightmare, considerably complicates every new language feature, and on top of that it's very slow. That's w...

Minor changes (build failures fixes, typos, ...) can be pushed directly. Pull Request is a recommended way since it will check the build succeeds.

Automatic production profiling for JVMs. Contribute to jvmguard/jvmguard development by creating an account on GitHub.