Spring Rabbit JUnit Support
84%
Total Score
healthy
Healthy release backed by active maintenance and signed publishing, with workflow pinning and template-hygiene caveats.
The assessed version is a 4.2.0 milestone prerelease, so it may change before final stabilization. The package otherwise has a stable major line and a substantial release history.
All 20 workflows were analyzed with no untrusted checkouts or script-injection findings, and only one workflow has top-level write permissions. However, 16 of 25 action references are unpinned, and high-confidence template-injection hygiene findings appear in release-train workflows; without a dangerous trigger, these remain workflow-quality concerns rather than a severe dependency-health risk.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-960920 spring-rabbit-junit is vulnerable to Insertion of Sensitive Information into Log File in versions 0.0.1 - 4.0.4 and 4.1.0 - 4.1.0. | 0.0.1 - 4.0.44.1.0 - 4.1.0 | Medium |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
org.springframework:spring-core Version 7.1.0-M2 | — | — |
org.springframework:spring-test Version 7.1.0-M2 | — | — |
com.rabbitmq:amqp-client Version 5.36.0 | — | — |
org.springframework:spring-web Version 7.1.0-M2 | — | — |
org.junit.jupiter:junit-jupiter-api Version 6.1.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.