Package Health

spring-ai-anthropic

Anthropic models support

Latest 2.1.0-M1org.springframework.aiMavenMaven

79%

Total Score

healthy

Healthy: active releases and a broad maintainer community outweigh workflow pinning gaps.

Are you affected? Scan for Free

Health Score Breakdown

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, which is a transparency caution; the organization-owned Spring AI monorepo context partly offsets the mismatch.

Version stabilitycaution

This is a prerelease (2.1.0-M1), and 40% of recent releases were prereleases, which adds compatibility uncertainty despite the stable major line.

Workflow auditcaution

All 17 workflows were analyzed, but 78 of 88 action references are unpinned and the audit found high-confidence template-injection and floating-image findings. No untrusted checkout or script-injection sink was detected, limiting this to a hygiene caution.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-10927
spring-ai-anthropic is vulnerable to Path Traversal in versions 1.1.0 - 1.1.6.
1.1.0 - 1.1.6
Medium

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
org.springframework.ai:spring-ai-model
Version 2.1.0-M1
—
—
com.anthropic:anthropic-java-core
Version 2.64.0
—
—
com.squareup.okhttp3:okhttp
Version 4.12.0
—
—
io.micrometer:micrometer-core
Version 1.18.0-M2
—
—
io.micrometer:context-propagation
Version 1.2.1
—
—

Weekly Downloads

Info

Last Published
18 days ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform