spring-ai-model-chat-memory-repository-redis
Redis-based persistent implementation of the Spring AI ChatMemoryRepository interface
72%
Total Score
caution
Usable with caveats: this milestone release has heavily unpinned CI actions.
Health Score Breakdown
The repository neither matches the package name nor mentions it in the README, which creates some package-ownership ambiguity; organizational monorepo backing partly offsets the mismatch.
The project uses Maven, but no repository security-scanning tool was detected; this is a minor transparency gap rather than evidence of abandonment.
Version 2.1.0-M1 is a milestone prerelease, and 85% of recent releases are prereleases, so compatibility risk is higher than for a final release.
All 17 workflows were analyzed without failures, but 78 of 88 action references are unpinned and several high-confidence template-injection and floating-image findings remain. No untrusted checkout or script-injection trigger was reported, limiting the severity.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-448669 spring-ai-model-chat-memory-repository-redis is vulnerable to Improper Neutralization of Special Elements in Data Query Logic in versions 2.0.0 - 2.0.0. | 2.0.0 - 2.0.0 | Medium |
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 org.springframework.ai:spring-ai-model Version 2.1.0-M1 | — | — |
redis.clients:jedis Version 8.0.1 | — | — |
com.google.code.gson:gson Version 2.14.0 | — | — |
Weekly Downloads
Info
- Last Published
- 18 days ago
- Created
- 10 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.