bcjmail-jdk18on
The Bouncy Castle Java APIs for doing S/MIME with the Jakarta Mail APIs. The APIs are designed primarily to be used in conjunction with the BC Java provider for Java 1.8 and later.
88%
Total Score
healthy
Healthy: active project backing, frequent releases, and signed Maven provenance outweigh minor license and workflow hygiene concerns.
Health Score Breakdown
The artifact and repository both contain license files, but the declared Bouncy Castle Licence differs from the detected MIT text, creating a licensing clarification concern.
The one workflow was fully analyzed with no audit findings, no untrusted checkout or script injection, and job-level permissions; however, all 3 action references are unpinned, leaving a minor reproducibility and supply-chain hygiene gap.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-413486 bcjmail-jdk18on is vulnerable to Improper Certificate Validation in versions 0.0.1 - 1.84. | 0.0.1 - 1.84 | High |
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 org.bouncycastle:bcpkix-jdk18on Version 1.85 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.