Maven · repo1.maven.org
land.oras:oras-java-sdk
Java Base64 Combo: Base64.decode combined with network / process — common in API clients, but worth review.
Why PkgRadar flagged 0.7.0
| Severity | Signal | Evidence |
|---|---|---|
| medium | Java Base64 Combo | Base64.decode combined with network / process — common in API clients, but worth review. · land/oras/auth/AuthStore.java |
| medium | Java Process Spawn | Runtime.exec / ProcessBuilder — process spawning. · land/oras/auth/AuthStore.java |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.7.0 | Review | 35 | 2026-06-20 |
Block this in CI
pkgradar gate --ecosystem maven land.oras:[email protected]