PkgRadar

Maven · repo1.maven.org

cn.geoair.devkit:geoair-dynamic-ds

Remote Payload: matched "cUrl "

Why PkgRadar flagged J17.1.4

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · cn/geoair/comp/dynamic/ds/apo/DataSourceApo.java
mediumRemote Payloadmatched "cUrl " · cn/geoair/comp/dynamic/ds/geotools/GirGeoToolsDataStoreStorage.java
mediumRemote Payloadmatched "cUrl " · cn/geoair/comp/dynamic/ds/utils/JdbcUrlSplitter.java

Scanned versions

VersionVerdictScoreScanned (UTC)
J17.1.4High risk362026-06-12

Block this in CI

PkgRadar gates cn.geoair.devkit:geoair-dynamic-ds (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem maven cn.geoair.devkit:[email protected]
cn.geoair.devkit:geoair-dynamic-ds — Maven security scan | PkgRadar