java-migrate — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited java-migrate (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Guide the migration of a Java project to a newer Java version. This is an interactive migration assistant.
Check pom.xml (<java.version>, <maven.compiler.source>, <maven.compiler.target>) or build.gradle (sourceCompatibility, javaVersion). Ask for target version if not specified.
Breaking changes to fix:
sun.* and com.sun.* internal API usage → find public alternativesjavax.xml.bind (JAXB), javax.activation, javax.annotation → add as Maven dependencies (jakarta.xml.bind-api, etc.)ClassLoader.getSystemClassLoader().getResourceAsStream() → use getClass().getResourceAsStream()finalize() → deprecated, suggest Cleaner or try-with-resourcesQuick wins to adopt (optional):
var for local variables (Java 10+) where type is obviousList.of(), Map.of(), Set.of() instead of Collections.unmodifiableList(Arrays.asList(...))String new methods: isBlank(), strip(), lines(), repeat()Optional.ifPresentOrElse(), Optional.or()Build changes:
<maven.compiler.source>11</maven.compiler.source>
<maven.compiler.target>11</maven.compiler.target>Breaking changes to fix:
--add-opens flags (may need library updates)SecurityManager usagesun.misc.Unsafe direct usage → find library replacementsQuick wins to adopt (optional):
instanceof (Java 16+)Breaking changes to fix:
Quick wins to adopt (optional):
getFirst(), getLast() (Java 21)Output a numbered checklist:
Migration: Java [current] → Java [target]
REQUIRED (must fix before compiling):
[ ] 1. [specific change with file/class reference if visible]
[ ] 2. ...
RECOMMENDED (adopt for better code):
[ ] 3. [specific improvement]
[ ] 4. ...
BUILD CHANGES:
[ ] Update pom.xml/build.gradle compiler version
[ ] Update CI/CD Java version
[ ] Update Docker base image (e.g., eclipse-temurin:[target]-jre)If the project files are accessible: "Want me to scan your codebase for the required changes above?"
/java-review to catch any remaining issues/java-refactor to adopt new idioms~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.