Maven · repo1.maven.org

software.amazon.awssdk.crt:aws-crt

Java Process Spawn: Runtime.exec / ProcessBuilder — process spawning.

Why PkgRadar flagged 0.47.1

Severity	Signal	Evidence
medium	Java Process Spawn	Runtime.exec / ProcessBuilder — process spawning. · software/amazon/awssdk/crt/CRT.java
medium	Java Static Init Side Effect	Static-initializer block contains process/network/reflection — runs on first class load (contributory signal). · software/amazon/awssdk/crt/CRT.java
medium	Large Native Blob	5383464 bytes · linux/armv8/glibc/libaws-crt-jni.so
medium	Large Native Blob	6084664 bytes · linux/x86_64/musl/libaws-crt-jni.so
medium	Large Native Blob	7552120 bytes · osx/x86_64/cruntime/libaws-crt-jni.dylib
medium	Large Native Blob	5220776 bytes · linux/armv8/musl/libaws-crt-jni.so
medium	Large Native Blob	6046032 bytes · linux/x86_64/glibc/libaws-crt-jni.so
medium	Large Native Blob	6402145 bytes · osx/armv8/cruntime/libaws-crt-jni.dylib

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.47.1`	Review	26	2026-06-16

Block this in CI

PkgRadar gates software.amazon.awssdk.crt:aws-crt (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem maven software.amazon.awssdk.crt:[email protected]