I'd like to donate atomic input validation for Java serialization to River.
At least one security researcher has provided some initial positive feedback. See the comments at the end of this article. https://contrastsecurity.com/security-influencers/java-deserializing-open-source-tool Regards, Peter. Sent from my Samsung device.
