This rule provides information at a best-effort approach as we can't tell just from the source code whether an agent is installed at JVM startup or dynamically at runtime. JDKs can use the `-XX:-EnableDynamicAgentLoading` command line option starting in JDK21 to ensure that agents cannot be loaded dynamically.

When
A Java class references the java.lang.instrument package

Perform
add a hint advising that dynamically attaching agents will be removed in a later JDK release

References:
https://bugs.openjdk.org/browse/JDK-8307479
https://openjdk.org/jeps/451