Minor Description
The public static field org.apache.commons.io.file.PathUtils.NOFOLLOW_LINK_OPTION_ARRAY has as value a non-empty array.
This is error-prone because by accident (or intentionally by malicious code) the element of the array could be replaced, which could cause completely unrelated parts of an application to malfunction.
See also SonarSource rule RSPEC-2386.
It would be good to instead add a static factory method which creates a new array every time and to mark the NOFOLLOW_LINK_OPTION_ARRAY field as deprecated (for removal?).