Package Health/org.springframework.cloud:spring-cloud-config-monitor

spring-cloud-config-monitor

Spring Cloud Config Monitor

Latest 5.1.0-M1org.springframework.cloud

Maven

86%

Total Score

healthy

Healthy—active maintenance, signed publishing, and strong project backing outweigh the milestone-version and workflow-hygiene caveats.

Are you affected? Scan for Free

Health Score Breakdown

Version stability

Version 5.1.0-M1 is a prerelease, which adds some compatibility uncertainty even though it is the latest version and the recent prerelease share is only 30%.

Workflow audit

All nine workflows were analyzed, all 12 action references are pinned, and six workflows use read-only permissions. High-confidence template-injection findings and one workflow with top-level write permissions are workflow-hygiene cautions, but no untrusted checkout or script-injection sink was found.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-918519 spring-cloud-config-monitor is vulnerable to Denial of Service (DoS) in versions 0.0.1 - 5.0.4.	0.0.1 - 5.0.4	Medium

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
org.springframework.cloud:spring-cloud-config-server Version 5.1.0-M1	—	—
org.springframework.cloud:spring-cloud-bus Version 5.1.0-M1	—	—
org.springframework.boot:spring-boot-autoconfigure-processor Version 4.2.0-M2	—	—
org.springframework.boot:spring-boot-starter-security Version 4.2.0-M2	—	—