micrometer-core

Dependency profilecaution

The package declares 35 runtime dependencies spanning many integrations and frameworks. That breadth increases transitive dependency and compatibility exposure, although it is consistent with a core instrumentation library supporting multiple platforms.

Version stabilitycaution

This release is a milestone prerelease (1.18.0-M2), so it carries more compatibility risk than a final release. The package otherwise remains on a stable major version and has a substantial recent release history.

Workflow auditcaution

All 12 workflows were analyzed with no untrusted checkout or script-injection findings. However, the audit reports 22 high-confidence template-injection findings, one workflow with top-level write permissions, and seven of 17 action references unpinned; these are workflow hygiene concerns, not evidence of project abandonment.