feign-bom
Bill of material
88%
Total Score
healthy
Frequent releases, active contributors, and signed builds support this release; only workflow dependency pinning is a notable gap.
Health Score Breakdown
All two workflows were analyzed with no injection, untrusted-checkout, or other audit findings. However, all five action references are unpinned and one workflow grants top-level write permissions, so workflow hygiene is a caution rather than a clean bill of health.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10210 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. feign-bom is vulnerable to Cross-site Scripting (XSS) in versions 10.2.0 - 13.5. | 10.2.0 - 13.5 | Medium |
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 8 days ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.