Maven · repo1.maven.org
one.nextera.openat.javelle:javelle-cli
Java Static Init Side Effect: Static-initializer block contains process/network/reflection — runs on first class load.
Why PkgRadar flagged 0.1.34
| Severity | Signal | Evidence |
|---|---|---|
| high | Java Static Init Side Effect | Static-initializer block contains process/network/reflection — runs on first class load. · io/javelle/cli/DemoCommand.java |
| medium | Java Process Spawn | Runtime.exec / ProcessBuilder — process spawning. · io/javelle/cli/DemoCommand.java |
| medium | Java Process Spawn | Runtime.exec / ProcessBuilder — process spawning. · io/javelle/cli/RemoteTemplate.java |
| medium | Java Process Spawn | Runtime.exec / ProcessBuilder — process spawning. · io/javelle/cli/DevToolsCommand.java |
| medium | Java Process Spawn | Runtime.exec / ProcessBuilder — process spawning. · io/javelle/cli/DevCommand.java |
| medium | Java Process Spawn | Runtime.exec / ProcessBuilder — process spawning. · io/javelle/cli/DoctorCommand.java |
| medium | Java Process Spawn | Runtime.exec / ProcessBuilder — process spawning. · io/javelle/cli/ProcessSupport.java |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.1.34 | High risk | 85 | 2026-06-15 |
Block this in CI
pkgradar gate --ecosystem maven one.nextera.openat.javelle:[email protected]