Client-Side Folia Plugin JAR Scanner

Drop one plugin .jar or an entire server plugins/ folder. ZIP Central Directory headers, plugin.yml / paper-plugin.yml, and 0xCAFEBABE JVM class constant pools are unpacked locally in browser memory.

100% local ArrayBuffer + DecompressionStream analysis. Zero network uploads, zero external CDNs.

Drop plugin .jar file(s) here

Supports multiple JARs at once to build a full Server Compatibility Matrix

Scan shaded dependencies (include HikariCP, bStats, Kyori, Kotlin, Guava, Netty, etc.)

Gate Releases in GitHub Actions

Run the full CLI analyzer (with intra-jar call-graph async taint propagation, Folia guard resolution, and SARIF code-scanning alerts) in 3 lines:

- uses: SalyyS1/foliascan@main
  with:
    jar: build/libs/*.jar
    fail-on: critical
    sarif-file: foliascan.sarif

Browser vs CLI scope: This browser scanner checks descriptors (FS001), bytecode patcher markers (FS002), unconditional Folia crashes (FS010-FS041), NMS internals (FS070), and thread checks (FS080) directly from JVM constant pools, and flags classes containing contextual async + region-guarded calls for deep CLI call-graph verification.

Server Compatibility Matrix

Verdict	Artifact	Plugin	Descriptor	folia-supported	Classes	Blocker	Critical	Warning	Info

Core Folia Rule Catalog Verified in Browser

Rule	Severity	Detection Target	Folia Patch Provenance