Maven · repo1.maven.org
com.julien-dubois.bootui:bootui-autoconfigure
Java Process Spawn: Runtime.exec / ProcessBuilder — process spawning.
Why PkgRadar flagged 1.4.0
| Severity | Signal | Evidence |
|---|---|---|
| medium | Java Process Spawn | Runtime.exec / ProcessBuilder — process spawning. · io/github/jdubois/bootui/autoconfigure/web/GitHubTokenProvider.java |
| medium | Remote Payload | matched "curl " · io/github/jdubois/bootui/autoconfigure/sourcetree/DockerPackageManager.java |
| medium | Remote Payload | matched "cUrl " · io/github/jdubois/bootui/autoconfigure/web/DatabaseConnectionPoolsController.java |
| medium | Remote Payload | matched "raw.githubusercontent.com" · io/github/jdubois/bootui/autoconfigure/graalvm/GraalVmDependencyScanner.java |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.4.0 | High risk | 51 | 2026-06-12 |
Block this in CI
pkgradar gate --ecosystem maven com.julien-dubois.bootui:[email protected]