PkgRadar

Maven · repo1.maven.org

com.backbase.oss:boat-scaffold

Remote Payload: matched "cUrl "

Why PkgRadar flagged 0.18.3

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · com/backbase/oss/codegen/yard/BoatYardGenerator.java

Scanned versions

VersionVerdictScoreScanned (UTC)
0.18.3Review62026-06-12

Block this in CI

PkgRadar gates com.backbase.oss:boat-scaffold (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem maven com.backbase.oss:[email protected]