PkgRadar

Maven · repo1.maven.org

org.conductoross:conductor-ai

Java Base64 Combo, Credential file access

Why PkgRadar flagged 3.31.0

SeveritySignalEvidence
mediumJava Base64 Comboorg/conductoross/conductor/ai/providers/gemini/GeminiVertex.java
mediumJava Base64 Comboorg/conductoross/conductor/ai/providers/gemini/GeminiVideoModel.java
mediumJava Base64 Comboorg/conductoross/conductor/ai/providers/openai/OpenAIVideoModel.java
mediumJava Base64 Comboorg/conductoross/conductor/ai/providers/openai/OpenAI.java
mediumJava Base64 Comboorg/conductoross/conductor/ai/LLMHelper.java

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
3.31.0Review552026-06-25

Block this in CI

PkgRadar gates org.conductoross:conductor-ai (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem maven org.conductoross:[email protected]
org.conductoross:conductor-ai — Maven security scan | PkgRadar