Package Health/org.springframework.cloud:spring-cloud-stream-schema-registry-client

spring-cloud-stream-schema-registry-client

Spring Cloud Stream Schema Registry Components

Latest 5.1.0-M1org.springframework.cloud

Maven

88%

Total Score

healthy

Healthy, backed by active maintenance and a signed release; this milestone version and workflow hygiene are the main caveats.

Are you affected? Scan for Free

Health Score Breakdown

Version stability

Version 5.1.0-M1 is a prerelease, so it may change before final release; however, it is on a stable major line and only 30% of recent releases were prereleases.

Workflow audit

All 10 workflows were analyzed with no untrusted checkouts or script injections; five of 17 action references are unpinned. The audit found high-confidence template-injection hygiene issues and one workflow with top-level write permissions, but no dangerous trigger-and-sink combination was observed.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-816893 spring-cloud-stream-schema-registry-client is vulnerable to Use of Cache Containing Sensitive Information in versions 4.2.0 - 5.0.2.	4.2.0 - 5.0.2	Low

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
org.springframework:spring-messaging Version 7.1.0-M2	—	—
org.springframework:spring-web Version 7.1.0-M2	—	—
org.springframework.boot:spring-boot-restclient Version 4.2.0-M2	—	—
org.springframework.boot:spring-boot-starter Version 4.2.0-M2	—	—
tools.jackson.core:jackson-databind Version 3.1.6	—	—