koin-core

KOIN - Kotlin simple Dependency Injection Framework

Latest 4.2.2io.insert-koin

Maven

72%

Total Score

caution

Usable with caveats: frequent releases contrast with no recorded commits in the last three months.

Are you affected? Scan for Free

Health Score Breakdown

Repo commit activity

No commits or active maintainers were recorded in the last three months, a meaningful maintenance warning despite the recent push and frequent registry releases.

Repo issue activity

Issues and pull requests remain active, with recent issues closed and pull requests opened, though no recent pull requests were merged.

Security policy

The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear.

Workflow audit

All five workflows were analyzed without audit findings or untrusted checkouts, but all nine action references are unpinned. This is a supply-chain hygiene gap, not a severe risk on its own.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2025-10040 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. koin-core is vulnerable to Race Condition in versions 3.1.0 - 4.0.1.	3.1.0 - 4.0.1	Low

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
org.jetbrains.kotlin:kotlin-stdlib Version 2.3.20	—	—
co.touchlab:stately-concurrency Version 2.1.0	—	—
co.touchlab:stately-concurrent-collections Version 2.1.0	—	—