Package Health

io.netty:netty-codec-classes-quic

This release appears generally suitable to depend on: it has a stable non-prerelease version profile, regular release activity with 11 releases in the last 12 months, no registry deprecation, a bounded runtime dependency set, no install-time lifecycle scripts, and Maven PGP build provenance. The main concerns are that no license declaration or license file was detected and no source repository was declared, reducing legal and maintenance transparency; however, the artifact is a focused compiled Netty module, so the absence of README, tests, and changelog content in the package is not by itself a material health problem. Repository-based maintenance and transparency signals were not available, so confidence is moderate rather than high.

Latest 4.2.18.FinalMavenMaven

76%

Total Score

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

90

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

100

Are you affected? Scan for Free

Health checks

Licensecaution

No declared license and no license file were detected, creating a genuine licensing and transparency concern for adoption.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-563243 New
netty-codec-classes-quic is vulnerable to Improper Certificate Validation in versions 4.2.11.Final - 4.2.17.Final.
4.2.11.Final - 4.2.17.Final
High
CVE-2026-50009
io.netty:netty-codec-classes-quic is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 4.2.0.Final - 4.2.14.Final.
4.2.0.Final - 4.2.14.Final
Medium
CVE-2026-44894
io.netty:netty-codec-classes-quic is vulnerable to Improper Verification of Source of a Communication Channel in versions 4.2.0.Final - 4.2.14.Final.
4.2.0.Final - 4.2.14.Final
High

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
${project.groupId}:netty-common
Version 4.2.18.Final
${project.groupId}:netty-buffer
Version 4.2.18.Final
${project.groupId}:netty-transport
Version 4.2.18.Final
${project.groupId}:netty-codec-base
Version 4.2.18.Final
${project.groupId}:netty-handler
Version 4.2.18.Final

Weekly Downloads

Info

Last Published
7 days ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform