Gilead permits you to use your Persistent POJO (and especially the partially loaded ones) outside the JVM (GWT, Flex, XML, Google AppEngine...) without pain. No lazy initialisation or serialization exception. Just POJO and Domain Driven Design :) !
There are no reported vulnerabilities