PkgRadar

Maven · repo1.maven.org

com.kxindot:goblin

Java Dynamic Classload, Java Process Spawn

Why PkgRadar flagged 1.2.0

SeveritySignalEvidence
mediumJava Dynamic Classloadcom/kxindot/goblin/compile/JavaDynamicClassLoader.java
mediumJava Process Spawncom/kxindot/goblin/system/shell/Shell.java
mediumJava Process Spawncom/kxindot/goblin/system/shell/CmdlinImpl.java

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
1.2.0Review502026-06-22

Block this in CI

PkgRadar gates com.kxindot:goblin (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem maven com.kxindot:[email protected]