Package Health

spring-amqp-client

Spring Client for AMQP 1.0

Latest 4.2.0-M2org.springframework.amqpMavenMaven

82%

Total Score

healthy

Healthy, with prerelease and workflow-hygiene caveats.

Are you affected? Scan for Free

Health Score Breakdown

Repo package mentioncaution

The repository name does not match this package and its README does not mention it, which can indicate a mismatched source; however, the repository tree visibly contains the spring-amqp-client module, partly compensating for that concern.

Version stabilitycaution

This is a prerelease milestone, and 75% of recent releases are prereleases, so API and behavior changes are more likely than for a final release.

Workflow auditcaution

The audit found 16 of 25 action references unpinned and repeated high-confidence template-injection findings, creating workflow hygiene concerns. No untrusted checkout, script injection, or dangerous trigger was reported, so this is not a severe health risk on its own.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-70300
spring-amqp-client is vulnerable to Denial of Service (DoS) in versions 4.1.0 - 4.1.0.
4.1.0 - 4.1.0
Medium

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
org.springframework.amqp:spring-amqp
Version 4.2.0-M2
—
—
org.apache.qpid:protonj2-client
Version 1.3.0
—
—
org.springframework:spring-context
Version 7.1.0-M2
—
—
org.springframework:spring-messaging
Version 7.1.0-M2
—
—

Weekly Downloads

Info

Last Published
18 days ago
Created
8 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform