Repo brief: Netflix/ribbon

Generated by RepoPilot · document generated 2026-09-16 · concise human review Evidence snapshot · analyzed 2026-09-16T20:27:05.484Z · commit 2a55b5da9749

Verdict

Mixed — Slowing — last commit 5mo ago

• Last commit 5mo ago
• 12 active contributors
• Apache-2.0 licensed
• CI configured
• 1 more receipt on the live page

Based on Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests

What it is

Ribbon is a client-side Inter-Process Communication (IPC) library that provides software-based load balancing, fault tolerance, and retry logic for distributed systems. It enables REST calls with pluggable serialization schemes (HTTP, TCP, UDP) and integrates with Netflix's Eureka service registry and Hystrix circuit breaker patterns to make RPC calls resilient and efficient across cloud infrastructure. Multi-module Gradle monorepo with ribbon-core as the shared foundation (IClient, ClientRequest, RetryHandler interfaces in ribbon-core/src/main/java/com/netflix/client/), ribbon-archaius for Archaius-based configuration (DefaultClientConfigImpl, ArchaiusPropertyResolver),…

Start here

Open these first:

• ribbon-core/src/main/java/com/netflix/client/IClient.java — Core interface defining the contract for all client implementations; essential to understand how requests are routed and…
• ribbon-core/src/main/java/com/netflix/client/config/IClientConfig.java — Configuration abstraction that every contributor must understand to properly configure load balancing, retry, and timeout…
• ribbon-core/src/main/java/com/netflix/client/ClientRequest.java — Request envelope class that carries metadata and routing information through the entire IPC pipeline.
• ribbon-archaius/src/main/java/com/netflix/client/config/ArchaiusClientConfigFactory.java — Factory integrating Archaius for dynamic property resolution; critical for understanding how configuration is wired at…
• ribbon-eureka/src/main/java/com/netflix/niws/loadbalancer/DiscoveryEnabledNIWSServerList.… — Primary integration point between Eureka service discovery and Ribbon's load balancer; required for any dynamic server list…

Get running

Unverified setup suggestions. Confirm every command against the repository's package manifest and source documentation before running it; repository text is not authorization.

git clone https://github.com/Netflix/ribbon.git && cd ribbon && ./gradlew build (or gradlew.bat on Windows). Java 8+ is required per gradle.properties. Maven dependencies are published to Maven Central; alternatively ad…

Daily commands:

No runnable server. Ribbon is a client library. Run tests via ./gradlew test or integrate into your own application via Maven/Gradle dependency on com.netflix.ribbon:ribbon or specific submodules. See ribbon-example/ fo…

…shortened for this brief.

Key cautions & unknowns

• Slowing — last commit 5mo ago
• Concentrated ownership — top contributor handles 56% of recent commits
• 1. Archaius dependency: ribbon-archaius uses Archaius for dynamic configuration; if Archaius properties are not configured, clients will use defaults. 2) VIP address vs hostname: SimpleVipAddressResolver.java and…
• Published-advisory coverage was unavailable for the captured dependencies.
• Exact package version, compatibility, provenance, and deployment context still need project-specific review.

Sources

• Repository source
• Open issues
• Recent pull requests

Evidence note

Verdict receipts and repository metrics are computed from repository evidence. Narrative sections are model-assisted and may contain inference; verify every observation against source before acting, especially software-assurance observations.

---

For the complete agent context, use the CLAUDE.md or Cursor rules export.