PkgRadar

Maven · repo1.maven.org

com.aliyun:aliyun-java-sdk-core

Java Static Init Side Effect

Why PkgRadar flagged 4.7.9

SeveritySignalEvidence
mediumJava Static Init Side Effectcom/aliyuncs/http/HttpUtil.java
mediumJava Static Init Side Effectcom/aliyuncs/policy/retry/RetryUtil.java

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
4.7.9Review72026-06-24

Block this in CI

PkgRadar gates com.aliyun:aliyun-java-sdk-core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem maven com.aliyun:[email protected]