Package Health

spring-ai-pdf-document-reader

Spring AI PDF document reader

Latest 2.1.0-M1org.springframework.aiMavenMaven

78%

Total Score

healthy

Healthy overall, with strong maintenance and provenance despite all workflow actions not being pinned.

Are you affected? Scan for Free

Health Score Breakdown

Repo toolingcaution

The project uses Maven, but no repository security-scanning tools were detected; this is a modest transparency gap rather than evidence of abandonment.

Version stabilitycaution

This is a prerelease milestone, and 40% of recent releases are prereleases, so API or behavior changes are more likely than for a stable release.

Workflow auditcaution

All 17 workflows were analyzed, but 78 of 88 action references are unpinned and high-confidence template-injection and floating-image findings remain. No untrusted checkout or script-injection trigger was reported, so this is workflow hygiene risk rather than a severe standalone health failure.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-204618
spring-ai-pdf-document-reader is vulnerable to Denial of Service (DoS) in versions 1.0.0 - 2.0.0.
1.0.0 - 2.0.0
High
AIKIDO-2026-10674
spring-ai-pdf-document-reader is vulnerable to Denial of Service (DoS) in versions 1.1.0 - 1.1.4 and 1.0.0 - 1.0.5.
1.0.0 - 1.0.51.1.0 - 1.1.4
Medium

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
org.springframework.ai:spring-ai-commons
Version 2.1.0-M1
—
—
org.apache.pdfbox:pdfbox
Version 3.0.7
—
—

Weekly Downloads

Info

Last Published
18 days ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform