Maven Repository: io.github.chains-project » integrity-maven-plugin

Integrity Maven Plugin » 0.3.2

This plugin is a proof of concept for a maven plugin that can be used to validate the integrity of a maven repository. It does this by generating a lock file that contains the checksums of all the artifacts in the repository. The lock file can then be used to validate the integrity of the repository. This guards the supply chain against malicious actors that might tamper with the artifacts in the repository.

License	MIT
Categories	Maven Plugins
Tags	plugin github build build-system maven
HomePage	https://github.com/chains-project/maven-lockfile
Date	Mar 27, 2023
Files	pom (9 KB) maven-plugin (34 KB) View All
Repositories	Central
Ranking	#737385 in MvnRepository (See Top Artifacts) #4213 in Maven Plugins
Vulnerabilities	Vulnerabilities from dependencies: CVE-2023-2976 CVE-2021-26291 CVE-2020-8908

License

MIT

Tags

plugin github build build-system maven

HomePage

https://github.com/chains-project/maven-lockfile

Date

Mar 27, 2023

Files

pom (9 KB) maven-plugin (34 KB) View All

Repositories

Central

Ranking

#737385 in MvnRepository (See Top Artifacts)
#4213 in Maven Plugins

Vulnerabilities

Vulnerabilities from dependencies:
CVE-2023-2976
CVE-2021-26291
CVE-2020-8908

Maven
Gradle
Gradle (Short)
Gradle (Kotlin)
SBT
Ivy
Grape
Leiningen
Buildr

<!-- https://mvnrepository.com/artifact/io.github.chains-project/integrity-maven-plugin -->
<dependency>
    <groupId>io.github.chains-project</groupId>
    <artifactId>integrity-maven-plugin</artifactId>
    <version>0.3.2</version>
</dependency>

// https://mvnrepository.com/artifact/io.github.chains-project/integrity-maven-plugin
implementation group: 'io.github.chains-project', name: 'integrity-maven-plugin', version: '0.3.2'

// https://mvnrepository.com/artifact/io.github.chains-project/integrity-maven-plugin
implementation 'io.github.chains-project:integrity-maven-plugin:0.3.2'

// https://mvnrepository.com/artifact/io.github.chains-project/integrity-maven-plugin
implementation("io.github.chains-project:integrity-maven-plugin:0.3.2")

// https://mvnrepository.com/artifact/io.github.chains-project/integrity-maven-plugin
libraryDependencies += "io.github.chains-project" % "integrity-maven-plugin" % "0.3.2"

<!-- https://mvnrepository.com/artifact/io.github.chains-project/integrity-maven-plugin -->
<dependency org="io.github.chains-project" name="integrity-maven-plugin" rev="0.3.2"/>

// https://mvnrepository.com/artifact/io.github.chains-project/integrity-maven-plugin
@Grapes(
    @Grab(group='io.github.chains-project', module='integrity-maven-plugin', version='0.3.2')
)

;; https://mvnrepository.com/artifact/io.github.chains-project/integrity-maven-plugin
[io.github.chains-project/integrity-maven-plugin "0.3.2"]

# https://mvnrepository.com/artifact/io.github.chains-project/integrity-maven-plugin
'io.github.chains-project:integrity-maven-plugin:jar:0.3.2'

Include comment with link to declaration

Compile Dependencies (7)

Category/License	Group / Artifact	Version	Updates
JSON Lib Apache 2.0	com.google.code.gson » gson	2.10.1	2.11.0
Core Utils Apache 2.0	com.google.guava » guava 2 vulnerabilities	31.1-jre	33.4.0-jre
Logging Apache 2.0	org.apache.logging.log4j » log4j-core	2.20.0	2.24.3
Maven Repo API Apache 2.0	org.apache.maven.resolver » maven-resolver-api	1.9.7	2.0.5
Apache 2.0	org.apache.maven.shared » maven-dependency-tree	3.2.1	3.3.0
Maven Repo API Apache 2.0	org.apache.maven.shared » maven-artifact-transfer	0.13.1	2.0.5
Logging Bridge Apache 2.0	org.slf4j » log4j-over-slf4j	2.0.7	2.0.16

Provided Dependencies (3)

Category/License	Group / Artifact	Version	Updates
Build Model Apache 2.0	org.apache.maven » maven-plugin-api	3.2.5	3.9.9
Build Tool Apache 2.0	org.apache.maven » maven-core 1 vulnerability	3.2.5	3.9.9
Annotation Lib Apache 2.0	org.apache.maven.plugin-tools » maven-plugin-annotations	3.2	3.15.1

Test Dependencies (7)

Category/License	Group / Artifact	Version	Updates
Apache 2.0	com.soebes.itf.jupiter.extension » itf-jupiter-extension	0.12.0	0.13.1
Apache 2.0	com.soebes.itf.jupiter.extension » itf-assertj	0.12.0	0.13.1
Apache 2.0	org.apache.maven » maven-compat	3.9.1	3.9.9
Apache 2.0	org.apache.maven.plugin-testing » maven-plugin-testing-harness	3.3.0	✔
Apache 2.0	org.instancio » instancio	1.0.4	✔
Testing EPL 2.0	org.junit.jupiter » junit-jupiter-api	5.9.2	5.11.4
Testing EPL 2.0	org.junit.jupiter » junit-jupiter-engine	5.9.2	5.11.4