Apache Maven

Apache Maven at a glance

Apache Maven is a widely used build and dependency-management tool for Java projects, central to countless build pipelines. Maven ships regular releases plus fixes; as tooling that resolves and executes dependencies, integrity and pinning matter.

For admins the key practices are supply-chain hygiene: Maven downloads dependencies and plugins from repositories and executes plugin code during builds, so use trusted repositories, verify checksums/signatures where possible, and pin plugin and dependency versions for reproducible builds across a team and CI. Keep Maven current for security and compatibility fixes. Upgrades rarely break builds but read the notes. The dependencies your projects pull carry their own vulnerabilities — audit them (the OWASP dependency-check plugin helps). After upgrading, run a clean build and verify. On CI, avoid caching credentials in the local repository config in plain form. Patchletter surfaces new Maven releases.