spring-ai-transformers

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, creating uncertainty about package-to-source linkage; the monorepo structure partly explains the name mismatch but not the missing mention.

Version stabilitycaution

This is a prerelease (2.1.0-M1), and 40% of recent releases are prereleases, so API or behavior changes are more likely than for a stable release.

Workflow auditcaution

The audit analyzed all 17 workflows and found 78 of 88 action references unpinned, plus high-confidence template-injection and floating-image findings. No untrusted checkout or script-injection trigger was reported, so these are build-hygiene concerns rather than a standalone severe risk.