org.bouncycastle:bcpkix-jdk15to18
The repository includes tests, a changelog, security scanning, and a security policy. One runtime dependency and no install scripts keep adoption straightforward, while the license wording and unpinned workflow actions merit checking.
87%
Total Score
100
100
86
100
100
Health Score Breakdown
The registry declares the Bouncy Castle Licence and the repository contains a license file detected as MIT; because the detected license does not match the declaration, the licensing information deserves clarification.
The repository name does not match this package and its README does not mention it; although this can occur for a monorepo subpackage, the relationship is less transparent than a direct package reference.
The audited workflow has no untrusted checkouts, script injection, dangerous findings, or broad top-level write permissions. However, all 3 action references are unpinned, leaving a supply-chain hygiene gap.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-398185 bcpkix-jdk15to18 is vulnerable to Uncontrolled Resource Consumption in versions 0.0.1 - 1.84.0. | 0.0.1 - 1.84.0 | Medium |
AIKIDO-2026-654199 bcpkix-jdk15to18 is vulnerable to Uncontrolled Resource Consumption in versions 0.0.1 - 1.84.0. | 0.0.1 - 1.84.0 | Medium |
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 org.bouncycastle:bcutil-jdk15to18 Version 1.85 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.