Maven · repo1.maven.org
nu.validator:validator
Java Static Init Side Effect: Static-initializer block contains process/network/reflection — runs on first class load.
Why PkgRadar flagged 26.6.14
| Severity | Signal | Evidence |
|---|---|---|
| high | Java Static Init Side Effect | Static-initializer block contains process/network/reflection — runs on first class load. · w3c/css/util/ApplContext.java |
| medium | Java Process Spawn | Runtime.exec / ProcessBuilder — process spawning. · nu/validator/checker/test/NormalizationCheckerTest.java |
| medium | Remote Payload | matched "cUrl " · nu/validator/checker/CspEnforcementChecker.java |
| medium | Remote Payload | matched "IWR " · w3c/css/values/external/OpenTypeLanguageSystemTag.java |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
26.6.14 | High risk | 37 | 2026-06-14 |
Block this in CI
pkgradar gate --ecosystem maven nu.validator:[email protected]