← All reportsPublic report

jeecgboot/jeecgboot

【低代码迈入v2.0时代,一句话即可生成整个系统】企业级AI低代码平台,一键生成前后端代码甚至整个系统。 AI Skills 一句话画流程、设计表单、生成报表、大屏。内置 AI应用平台涵盖:AI聊天、知识库、流程编排、MCP插件等,兼容主流大模型。引领AI低代码「Skills 生成 → 在线配置 → 代码生成 → 手工合并->AI修改」开发模式,解决 Java 项目 90% 重复工作,提高效率又不失灵活。

47k stars Java View on GitHubprofiled 14d ago
Try GitZoid
18PRs this week
1Contributors
0Deps scanned
0Issues found
01 · Repo overview

How jeecgboot is put together

JeecgBoot is an enterprise AI low-code platform delivered as a monorepo containing a Java backend (Spring Boot 4.1.0, JDK 17+, Maven multi-module) and a Vue 3 + TypeScript SPA frontend (Vite 8, Ant Design Vue 4, Pinia). The backend is organized as jeecg-boot-base-core (framework/security/persistence), jeecg-module-system (users/roles/menus/auth, with api/biz/start submodules where jeecg-system-start is the runnable entrypoint), and jeecg-boot-module (demo plus the airag AI/RAG platform built on langchain4j). It runs either as a单体 Spring Boot app or as Spring Cloud Alibaba microservices (gateway, Nacos, Sentinel, monitor under jeecg-server-cloud), switchable via separate start modules and docker-compose files. Persistence uses MyBatis-Plus over Druid with dynamic datasources against MySQL (default, seeded via db/jeecgboot-mysql-5.7.sql) plus Oracle/PostgreSQL/SQL Server/MariaDB/DM/Kingbase drivers; Redis backs sessions (shiro-redis) and caching. AuthN/AuthZ is Apache Shiro 3.0 with com.auth0 JWT tokens, RBAC button/data-level permissions, and the frontend talks to the backend over REST proxied through Vite in dev.

Languages

JavaTypeScriptVue SFC/JavaScriptSQLLess/CSS

Frameworks

Spring Boot 4.1.0Spring Cloud Alibaba 2025.1.0.0Apache Shiro 3.0.0MyBatis-Plus 3.5.16langchain4j 1.17.2Vue 3.5Ant Design Vue 4PiniaVite 8QuartzFlowable (workflow engine)JimuReport/JimuBI starters

Datastores

MySQL 5.7+RedisPostgreSQLOracle 11gSQL ServerMariaDB达梦 DM8人大金仓 Kingbase8TiDBNacos (registry/config)MinIO / Aliyun OSS (object storage)RabbitMQ/RocketMQ (via jeecg-boot-starter)xxl-job

Infrastructure

Docker / docker-compose (single & cloud modes)Spring Cloud GatewaySentinelSkywalking tracingElectron desktop wrapperPWA (vite-plugin-pwa)qiankun micro-frontendPrometheus metrics via micrometer-registry-prometheus

Major components

jeecg-boot-base-core

Core framework module: web/websocket/mail/quartz starters, Shiro+JWT security stack, MyBatis-Plus/Druid/dynamic-datasource persistence, all JDBC drivers, MinIO/OSS/SMS/JustAuth integrations, Knife4j/springdoc API docs.

jeecg-module-system (api/biz/start)

System management domain (users, roles, menus, permissions, dictionaries) split into local/cloud API contracts, business implementation, and the runnable Spring Boot start application.

jeecg-boot-module-airag

AI application platform module providing AI chat assistants, knowledge base/RAG, model management, flow orchestration and MCP plugin features on langchain4j.

jeecg-module-demo

Demo/example business module illustrating generated-code patterns.

jeecg-server-cloud

Microservice deployment topology: gateway, Nacos server, Sentinel dashboard, monitor app, and cloud start variants of system/demo services.

jeecgboot-vue3

Vue 3 + TypeScript SPA frontend with dynamic menu routing, permission directives, i18n, qiankun micro-app support, Electron shell, and mock server.

db (SQL seeds)

Full MySQL 5.7 schema/data bootstrap script plus Nacos and xxl-job table scripts and cross-database conversion notes.

Docker deployment layer

docker-compose files and Dockerfiles for one-command startup of the单体 stack and the Spring Cloud stack.

Over the past three weeks the JeecgBoot team shipped its v3.9.5 release across both the Java backend and Vue3 frontend, including a new AI workflow designer and an upgraded built-in reporting tool. The most recent week focused on security, addressing a reported permission-bypass and SQL injection vulnerability and fixing a packaging failure in the open-source frontend. The team also launched JimuChatBI v1.0, an open-source conversational analytics product, earlier in the period.

Week by week

2026-08-24Security fixes and cleanup followed the v3.9.5 release, patching a reported vulnerability and repairing the frontend build.latest6 changes

Fix

Security vulnerability patched

Fixed a reported combination of permission bypass and SQL injection (LDYVUL-2026-00170236) that could have let attackers access data they shouldn't.

Fix

Frontend build fixed

Changed the BPM interface to load only when needed, resolving a failure when packaging the open-source frontend.

Docs

Vulnerability feedback documentation

Added notes explaining how to report security vulnerabilities to the project.

Chore

v3.9.5 open-source release

Published the v3.9.5 open-source version of the platform.

Chore

Reporting tool upgraded

Upgraded the bundled JimuReport reporting component to version 2.5.1.

Chore

Upgrade scripts cleaned up

Removed unnecessary upgrade SQL files left over from the release process.

2026-08-17The big v3.9.5 release week, shipping updated backend and frontend versions plus a new AI workflow designer.5 changes

Feature

New AI flow designer

Shipped the latest version of the AIFlow visual workflow designer for building automated processes.

Feature

v3.9.5 backend release

Released version 3.9.5 of the Java backend with its upgraded starter dependencies.

Feature

v3.9.5 frontend release

Released the matching version 3.9.5 of the Vue3 web frontend.

Docs

Release announcement

Published the official announcement for JeecgBoot v3.9.3/v3.9.5 as a free, open-source AI low-code development platform.

Fix

Oracle compatibility fix

Removed trailing semicolons in database scripts that were incompatible with Oracle databases.

2026-08-10A quieter maintenance week highlighted by the launch of JimuChatBI, an open-source conversational analytics product.3 changes

Feature

JimuChatBI v1.0 launch

Released JimuChatBI v1.0, described as the first open-source Chat2BI product that lets users ask questions in plain language and get data answers.

Chore

Focus on main branch

Shifted development attention to maintaining the main code branch.

Docs

New community chat group

Created a new QQ community group because the previous one had reached its member limit.

03 · Security check

Dependencies and code review

0 dependencies scanned

Dependency advisories

Security Watch

No known advisories across 0 scanned dependencies.

No known advisories in the scanned dependencies.

Code review

37 files reviewed; 0 of 2 claimed findings confirmed after verification.

Get this report every week for your repos.

GitZoid learns each repo, reports what changed, and flags what needs attention. One flat price for the whole team.

$19 a month, flat · First 10 outputs free · No card required