title: Malicious code vulnerability - Field should be package protected
body: <p>Sonar is giving me the message:</p>
  
  <blockquote>
    <p>Malicious code vulnerability - Field should be package protected for
    static array <code>FORMATS</code>.</p>
  </blockquote>
  
  <p>Why is this code considered malicious? I have a public class to store all the constants.</p>
  
  <pre><code>public class Constants
  {
      /*
      all the public static final constants of primitive datatypes for which 
      there is no sonar warning.
      */
      public static final String[] FORMATS = new String[] {
          "yyyy-MM-dd HH:mm:ss.S z", 
          "yyyy-MM-dd HH:mm:ss.S"
  }
  </code></pre>