org.springframework.ai:spring-ai-azure-cosmos-db-store

Repo package mentioncaution

The monorepo name does not match this module and its README does not mention the package, so the linkage is less transparent; the module's package path and organization-backed repository provide some context but do not remove the gap.

Repo toolingcaution

The project uses Maven, but no security-scanning tools were detected. The missing scanning coverage is a modest transparency gap rather than evidence of abandonment.

Version stabilitycaution

The assessed release is marked as non-prerelease, but the reported latest version is 1.1.8 while this release is 2.0.0-M6, creating some version-state ambiguity.

Workflow auditcaution

All 17 workflows were analyzed, but 78 of 88 action references are unpinned and the audit found high-confidence template-injection and floating-image findings. No pull_request_target, workflow_run, untrusted checkout, or script-injection trigger was reported, so these are workflow-hygiene concerns rather than a standalone severe risk.