Package Health/org.springframework.batch:spring-batch-infrastructure

spring-batch-infrastructure

The Spring Batch Infrastructure is a set of low-level components, interfaces and tools for batch processing applications and optimisations

Latest 6.1.0-M2org.springframework.batch

Maven

82%

Total Score

healthy

Healthy, supported by active maintenance and signed publishing; use caution because this is a milestone prerelease with workflow hygiene findings.

Are you affected? Scan for Free

Health Score Breakdown

Dependency profile

The release declares 27 runtime dependencies across Spring, database, messaging, serialization, and validation integrations; this is substantial but consistent with a broad infrastructure module.

Version stability

Version 6.1.0-M2 is a prerelease and 40% of recent releases are prereleases, so API or behavior changes remain more likely than in a final release.

Workflow audit

All 12 workflows were analyzed, all 22 action references are pinned, and no untrusted checkout or script-injection paths were found. However, the audit reported 25 high-confidence template-injection findings and one workflow with top-level write permissions; these are workflow hygiene concerns, not a standalone dependency-health failure.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-888292 spring-batch-infrastructure is vulnerable to Denial of Service (DoS) in versions 4.3.0 - 6.0.4.	4.3.0 - 6.0.4	Medium

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
org.springframework:spring-core Version 7.1.0-M2	—	—
org.springframework.retry:spring-retry Version 2.0.13	—	—
org.springframework:spring-context-support Version 7.1.0-M2	—	—
org.springframework:spring-jdbc Version 7.1.0-M2	—	—
org.springframework:spring-expression Version 7.1.0-M2	—	—