mcp-spring-webflux

Repo package mentioncaution

The repository name does not match the module and its README does not mention the package; organizational monorepo structure partly explains the mismatch, but the absence of a README reference leaves package ownership less transparent.

Repo toolingcaution

The project uses Maven, but no security-scanning tooling was detected; this is a modest transparency and hygiene gap rather than evidence of abandonment.

Version stabilitycaution

This is a prerelease milestone, and 82% of recent releases are prereleases, so consumers should expect more change than with a stable release.

Workflow auditcaution

All 17 workflows were analyzed, but 78 of 88 action references are unpinned, three workflows grant top-level write access, and high-confidence template-injection and floating-image findings reduce workflow reproducibility and security hygiene.