# CLEAN — gRPC
Scanned 2026-03-29 for CWE-407 (algorithmic complexity).

## Scope
The cloned `~/git/grpc` repository is the gRPC C/C++ core repo, not the Java
implementation (`grpc-java`). No Java source files were found in `src/` beyond
Android example activities.

## Findings
- No Java main-path source files present in this clone.
- gRPC Java (`io.grpc:grpc-*`) ships as a separate Maven/Gradle repository
  (`grpc/grpc-java` on GitHub) which was not cloned.

## Result
**CLEAN (N/A). No Java CWE-407 defects findable in this clone — wrong repo flavor.**
**Action: clone `grpc/grpc-java` for a proper Java scan if needed.**