org.springdoc:springdoc-openapi-starter-webflux-scalar
This release appears generally healthy and usable: it has a stable major version, 14 releases over roughly 12 months with a median interval of about 17 days, no registry deprecation, a small runtime dependency surface, and Maven PGP signing. The artifact is compact and internally coherent for a Spring Boot starter, and its embedded license files provide licensing evidence. However, transparency is reduced because no source repository is declared, while the artifact contains no README, tests, or changelog and there is no repository evidence available to compensate for those gaps. The package is therefore a reasonable dependency, but its maintenance and development practices are less verifiable than ideal.
78%
Total Score
100
90
100
100
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-454912 New springdoc-openapi-starter-webflux-scalar is vulnerable to Race Condition in versions 2.8.13 - 2.9.0 and 3.0.0 - 3.1.0. | 2.8.13 - 2.9.03.0.0 - 3.1.0 | Medium |
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 org.springdoc:springdoc-openapi-starter-webflux-api Version 3.1.1 | — | — |
com.scalar.maven:scalar-webflux Version * | — | — |
org.springframework.boot:spring-boot-actuator-autoconfigure Version * | — | — |
Weekly Downloads
Info
- Last Published
- 8 days ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.