Aikido Intel
Secure My Code
Package Health

io.kestra:core

Healthy and suitable to depend on, backed by very frequent releases and a highly active, diverse organization-owned repository. Review the repository's broad workflow permissions and the inconsistent reported latest version before adoption.

Latest 2.0.1MavenMaven

88%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

100

Are you affected? Scan for Free

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-739614 New
core is vulnerable to Server-Side Request Forgery (SSRF) in versions 0.2.0 - 1.3.38.
0.2.0 - 1.3.38
High

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
com.google.guava:guava
Version *
—
—
commons-io:commons-io
Version *
—
—
org.apache.commons:commons-lang3
Version *
—
—
io.swagger.core.v3:swagger-annotations
Version *
—
—
com.google.code.findbugs:jsr305
Version *
—
—

Weekly Downloads

Info

Last Published
4 days ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Scan for Free
Book a Demo

Free. No credit card required.

Aikido Platform
Subscribe
Stay up to date with all updates

I consent to receiving marketing communications based on Aikido’s Privacy Policy.

LinkedIn YouTube X
© 2026 Aikido Security BV | BE0792914919
Ghent, Belgium | San Francisco, US
SOC 2SOC 2Compliant
ISO 27001ISO 27001Compliant
ISO 42001ISO 42001Compliant
FedRAMPFedRAMPImplementing

© All Intel data is openly available and commercially licensed.