Maven · repo1.maven.org

cn.pivoto.polaris.toolkit:polaris-builder-core

Remote Payload: matched "cUrl "

Why PkgRadar flagged 3.8.16

Severity	Signal	Evidence
medium	Remote Payload	matched "cUrl " · io/polaris/builder/code/annotation/CodeWithDefaults.java

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`3.8.16`	Review	6	2026-06-10

Block this in CI

PkgRadar gates cn.pivoto.polaris.toolkit:polaris-builder-core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem maven cn.pivoto.polaris.toolkit:[email protected]