PkgRadar

Maven · repo1.maven.org

com.sksamuel.scrimage:scrimage-webp

Java Static Init Side Effect: Static-initializer block contains process/network/reflection — runs on first class load.

Why PkgRadar flagged 4.6.4

SeveritySignalEvidence
highJava Static Init Side EffectStatic-initializer block contains process/network/reflection — runs on first class load. · com/sksamuel/scrimage/webp/AnimDumpHandler.java
highJava Static Init Side EffectStatic-initializer block contains process/network/reflection — runs on first class load. · com/sksamuel/scrimage/webp/CWebpHandler.java
highJava Static Init Side EffectStatic-initializer block contains process/network/reflection — runs on first class load. · com/sksamuel/scrimage/webp/DWebpHandler.java
highJava Static Init Side EffectStatic-initializer block contains process/network/reflection — runs on first class load. · com/sksamuel/scrimage/webp/Gif2WebpHandler.java
highJava Static Init Side EffectStatic-initializer block contains process/network/reflection — runs on first class load. · com/sksamuel/scrimage/webp/Img2WebpHandler.java
highJava Static Init Side EffectStatic-initializer block contains process/network/reflection — runs on first class load. · com/sksamuel/scrimage/webp/WebpMuxHandler.java
mediumJava Process SpawnRuntime.exec / ProcessBuilder — process spawning. · com/sksamuel/scrimage/webp/AnimDumpHandler.java
mediumJava Process SpawnRuntime.exec / ProcessBuilder — process spawning. · com/sksamuel/scrimage/webp/CWebpHandler.java
mediumJava Process SpawnRuntime.exec / ProcessBuilder — process spawning. · com/sksamuel/scrimage/webp/DWebpHandler.java
mediumJava Process SpawnRuntime.exec / ProcessBuilder — process spawning. · com/sksamuel/scrimage/webp/Gif2WebpHandler.java
mediumJava Process SpawnRuntime.exec / ProcessBuilder — process spawning. · com/sksamuel/scrimage/webp/Img2WebpHandler.java
mediumJava Process SpawnRuntime.exec / ProcessBuilder — process spawning. · com/sksamuel/scrimage/webp/WebpMuxHandler.java

Scanned versions

VersionVerdictScoreScanned (UTC)
4.6.4High risk502026-06-14

Block this in CI

PkgRadar gates com.sksamuel.scrimage:scrimage-webp (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem maven com.sksamuel.scrimage:[email protected]