Maven · repo1.maven.org
org.scijava:minimaven
Java Static Init Side Effect: Static-initializer block contains process/network/reflection — runs on first class load.
Why PkgRadar flagged 2.2.3
| Severity | Signal | Evidence |
|---|---|---|
| high | Java Static Init Side Effect | Static-initializer block contains process/network/reflection — runs on first class load. · org/scijava/minimaven/BuildEnvironment.java |
| medium | Java Process Spawn | Runtime.exec / ProcessBuilder — process spawning. · org/scijava/minimaven/BuildEnvironment.java |
| medium | Java Dynamic Classload | URLClassLoader / defineClass — runs attacker-provided bytecode. · org/scijava/minimaven/JarClassLoader.java |
| medium | Java Dynamic Classload | URLClassLoader / defineClass — runs attacker-provided bytecode. · org/scijava/minimaven/MiniMaven.java |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
2.2.3 | High risk | 73 | 2026-06-15 |
Block this in CI
pkgradar gate --ecosystem maven org.scijava:[email protected]