PkgRadar

Maven · repo1.maven.org

io.github.lunasaw:zlm-spring-boot-starter

Remote Payload: matched "cUrl "

Why PkgRadar flagged 1.0.11

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · io/github/lunasaw/zlm/entity/StreamFfmpegItem.java

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.11Review122026-06-10

Block this in CI

PkgRadar gates io.github.lunasaw:zlm-spring-boot-starter (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem maven io.github.lunasaw:[email protected]