How does Maven Central handle malicious packages?
#java #maven #mavencentral #packages
www.reddit.com/r/MavenC...
#java #maven #mavencentral #packages
www.reddit.com/r/MavenC...
October 29, 2026 at 10:20 PM
How does Maven Central handle malicious packages?
#java #maven #mavencentral #packages
www.reddit.com/r/MavenC...
#java #maven #mavencentral #packages
www.reddit.com/r/MavenC...
How does Maven Central handle malicious packages, and where do the registry’s responsibilities end? We’re discussing it on r/MavenCentral, where the Central team is active and can join the conversation.
www.reddit.com/r/MavenCentr...
www.reddit.com/r/MavenCentr...
From the MavenCentral community on Reddit
Explore this post and more from the MavenCentral community
www.reddit.com
October 28, 2026 at 2:50 PM
How does Maven Central handle malicious packages, and where do the registry’s responsibilities end? We’re discussing it on r/MavenCentral, where the Central team is active and can join the conversation.
www.reddit.com/r/MavenCentr...
www.reddit.com/r/MavenCentr...
Maven Central is reportedly down for some users right now. Are you one of them? #MavenCentral #MavenCentralDown
https://statusisdown.com/service/maven_central/
https://statusisdown.com/service/maven_central/
Is Maven Central down? Live status & outages - Status Is Down
Is Maven Central down right now? Check the latest outage reports and share your experience. Get real-time alerts when Maven Central is down.
statusisdown.com
October 26, 2026 at 11:13 AM
Maven Central is reportedly down for some users right now. Are you one of them? #MavenCentral #MavenCentralDown
https://statusisdown.com/service/maven_central/
https://statusisdown.com/service/maven_central/
Yep, they confirmed it here: www.reddit.com/r/MavenCentr...
HokieGeek's comment on "New in Maven Central: Relative Popularity and usage trends in Usage Center"
Explore this conversation and more from the MavenCentral community
www.reddit.com
October 2, 2026 at 6:38 AM
Yep, they confirmed it here: www.reddit.com/r/MavenCentr...
🔴 Maven Central is reporting a Major Outage since 06:50 UTC
"repo1.maven.org is down"
Affects: CDN - repo1.maven.org
Live timeline → https://pingoru.io/providers/maven-central/incidents/9124488
#MavenCentral #MavenCentralDown
"repo1.maven.org is down"
Affects: CDN - repo1.maven.org
Live timeline → https://pingoru.io/providers/maven-central/incidents/9124488
#MavenCentral #MavenCentralDown
August 21, 2026 at 6:57 AM
🔴 Maven Central is reporting a Major Outage since 06:50 UTC
"repo1.maven.org is down"
Affects: CDN - repo1.maven.org
Live timeline → https://pingoru.io/providers/maven-central/incidents/9124488
#MavenCentral #MavenCentralDown
"repo1.maven.org is down"
Affects: CDN - repo1.maven.org
Live timeline → https://pingoru.io/providers/maven-central/incidents/9124488
#MavenCentral #MavenCentralDown
oh how I love working with IJ
November 6, 2024 at 4:05 PM
oh how I love working with IJ
Release 12.0.24 of @jettyproject.bsky.social just landed #MavenCentral get it while it's hot. #jetty 12.1.0 is just around the corner. github.com/jetty/jetty....
Release 12.0.24 · jetty/jetty.project
Special Thanks to the following Eclipse Jetty community members
@afarber (Alexander Farber)
@maarouf-yassine (Maarouf Yassine)
@trucnguyenlam (Truc Nguyen Lam)
Changelog
#13402 - Use default con...
github.com
August 6, 2025 at 10:47 PM
Release 12.0.24 of @jettyproject.bsky.social just landed #MavenCentral get it while it's hot. #jetty 12.1.0 is just around the corner. github.com/jetty/jetty....
No, it had `mavenLocal()`, `google()` and `mavenCentral()`. Removing the first one and magically everything started to work... *POSSIBLY* some corrupted archive in maven repository but stil gradle should use it's own repo/cache/storage mostly…
January 5, 2025 at 7:41 PM
No, it had `mavenLocal()`, `google()` and `mavenCentral()`. Removing the first one and magically everything started to work... *POSSIBLY* some corrupted archive in maven repository but stil gradle should use it's own repo/cache/storage mostly…
Vite for Kotlin 0.5.3 brings support for Kotlin 2.2.0 and Gradle 8.14!
https://gitlab.com/opensavvy/automation/kotlin-vite/-/releases/0.5.3
#vite #kotlin #javascript #gradle
https://gitlab.com/opensavvy/automation/kotlin-vite/-/releases/0.5.3
#vite #kotlin #javascript #gradle
0.5.3 • Kotlin 2.2.0 support · OpenSavvy / Build and automation / Vite for Kotlin · GitLab
Deployment New MavenCentral publishing process with NMCP (
gitlab.com
July 25, 2025 at 8:31 PM
Vite for Kotlin 0.5.3 brings support for Kotlin 2.2.0 and Gradle 8.14!
https://gitlab.com/opensavvy/automation/kotlin-vite/-/releases/0.5.3
#vite #kotlin #javascript #gradle
https://gitlab.com/opensavvy/automation/kotlin-vite/-/releases/0.5.3
#vite #kotlin #javascript #gradle
🎉 digipin-kotlin v0.1.0 released!
A Kotlin + Java library implementing India’s DIGIPIN (Digital Postal Index Number) specification. JVM-friendly, offline, fully spec-aligned.
📦 central.sonatype.com/artifact/phd...
👨💻 github.com/pranamphd/di...
#DIGIPIN #Kotlin #Java #MavenCentral #OpenSource
A Kotlin + Java library implementing India’s DIGIPIN (Digital Postal Index Number) specification. JVM-friendly, offline, fully spec-aligned.
📦 central.sonatype.com/artifact/phd...
👨💻 github.com/pranamphd/di...
#DIGIPIN #Kotlin #Java #MavenCentral #OpenSource
GitHub - pranamphd/digipin-kotlin: Kotlin implementation of the DIGIPIN geo-coded addressing system.
Kotlin implementation of the DIGIPIN geo-coded addressing system. - pranamphd/digipin-kotlin
github.com
January 30, 2026 at 4:34 PM
🎉 digipin-kotlin v0.1.0 released!
A Kotlin + Java library implementing India’s DIGIPIN (Digital Postal Index Number) specification. JVM-friendly, offline, fully spec-aligned.
📦 central.sonatype.com/artifact/phd...
👨💻 github.com/pranamphd/di...
#DIGIPIN #Kotlin #Java #MavenCentral #OpenSource
A Kotlin + Java library implementing India’s DIGIPIN (Digital Postal Index Number) specification. JVM-friendly, offline, fully spec-aligned.
📦 central.sonatype.com/artifact/phd...
👨💻 github.com/pranamphd/di...
#DIGIPIN #Kotlin #Java #MavenCentral #OpenSource
Publishing to MavenCentral has a learning curve to say the least 😅
I was about to buy a domain, then learnt that my information would be exposed on whois. Not too long after I learnt that Github Pages exist!
Now I'm messing with gradle configurations. Wish me luck 😄
#AndroidDev
I was about to buy a domain, then learnt that my information would be exposed on whois. Not too long after I learnt that Github Pages exist!
Now I'm messing with gradle configurations. Wish me luck 😄
#AndroidDev
July 7, 2025 at 9:27 PM
Publishing to MavenCentral has a learning curve to say the least 😅
I was about to buy a domain, then learnt that my information would be exposed on whois. Not too long after I learnt that Github Pages exist!
Now I'm messing with gradle configurations. Wish me luck 😄
#AndroidDev
I was about to buy a domain, then learnt that my information would be exposed on whois. Not too long after I learnt that Github Pages exist!
Now I'm messing with gradle configurations. Wish me luck 😄
#AndroidDev
have you downloaded the new package? it’s on a PPA. it’s literally on PyPI. it’s on npm with ads. it’s literally streaming on Flathub. it’s a pacman original. it’s on mavencentral. you can go to crates io and get it. Log onto nuget right now. Go to nuget. Dive into nuget. You can nuget it.
technology is approaching the optimum ratio of one entire package manage per package
December 25, 2025 at 3:13 AM
have you downloaded the new package? it’s on a PPA. it’s literally on PyPI. it’s on npm with ads. it’s literally streaming on Flathub. it’s a pacman original. it’s on mavencentral. you can go to crates io and get it. Log onto nuget right now. Go to nuget. Dive into nuget. You can nuget it.
The recommended way is to upload a single bundle instead of multiple bundles github.com/jreleaser/jr...
Is there a way to 'not' wait for the publilshing to complete? · jreleaser jreleaser · Discussion #1876
tl;dr, can I skip waiting for publishing to be complete when I run jreleaserDeploy? I just migrated to MavenCentral for my project using the jreleaser plugin. And I got it to release just fine. But...
github.com
July 28, 2025 at 3:40 PM
The recommended way is to upload a single bundle instead of multiple bundles github.com/jreleaser/jr...
The default setting is to UPLOAD _and_ PUBLISH in one go. Do you want to stage a bundle upload? Then define an explicit stage. It's explained in the guide jreleaser.org/guide/latest...
MavenCentral :: JReleaser
jreleaser.org
July 28, 2025 at 3:37 PM
The default setting is to UPLOAD _and_ PUBLISH in one go. Do you want to stage a bundle upload? Then define an explicit stage. It's explained in the guide jreleaser.org/guide/latest...
Yes, JReleaser is waiting to confirm the operation at the other side of the wire has reached the expected status. Some have asked to skip this check which is currently in evaluation github.com/jreleaser/jr...
MavenCentral publish takes too long at server side? · jreleaser jreleaser · Discussion #1919
I have tried to run a publication to maven central, but the task wasn't successful since the publication took too long on the server-side: [INFO] [mavenCentral] - ****.zip [INFO] [mavenCentral] Upl...
github.com
July 28, 2025 at 3:36 PM
Yes, JReleaser is waiting to confirm the operation at the other side of the wire has reached the expected status. Some have asked to skip this check which is currently in evaluation github.com/jreleaser/jr...
JReleaser 1.15.0 has been released! #jreleaser andresalmiray.com/jreleaser-1-...
JReleaser 1.15.0 has been released!
JReleaser v1.15.0 has just been released! The full list of issues can be found at the v1.15.0 milestone. This release brings several improvements to Nexus2 and MavenCentral deployers. Special thank…
andresalmiray.com
November 1, 2024 at 8:57 AM
JReleaser 1.15.0 has been released! #jreleaser andresalmiray.com/jreleaser-1-...
In the last 12 months, 22% of publications in MavenCentral were in groups that use KMP, for a total of 93% of published artifacts
August 1, 2026 at 12:26 PM
In the last 12 months, 22% of publications in MavenCentral were in groups that use KMP, for a total of 93% of published artifacts
Currently, MavenCentral contains 9 hash/signature files for every actual file. The recommendation from MavenCentral is only 4 hash/signature files for every actual file.
June 18, 2026 at 9:37 AM
Currently, MavenCentral contains 9 hash/signature files for every actual file. The recommendation from MavenCentral is only 4 hash/signature files for every actual file.
Gradle generates useless checksum files, which leads to a ×2 total number of published files
With the recent MavenCentral limits, it's even more important to get this fixed
Vote → github.com/gradle/gradl...
With the recent MavenCentral limits, it's even more important to get this fixed
Vote → github.com/gradle/gradl...
stop publishing .asc.${checksums} to Central repository · Issue #20232 · gradle/gradle
Expected Behavior .asc files are published to Maven Central without .asc.${checksum} Current Behavior for example: https://repo1.maven.org/maven2/org/junit/jupiter/junit-jupiter/5.8.2/ junit-jupite...
github.com
June 18, 2026 at 9:36 AM
Gradle generates useless checksum files, which leads to a ×2 total number of published files
With the recent MavenCentral limits, it's even more important to get this fixed
Vote → github.com/gradle/gradl...
With the recent MavenCentral limits, it's even more important to get this fixed
Vote → github.com/gradle/gradl...
Looks like ‘10% of MavenCentral users’ is ‘every project that is still active’
June 17, 2026 at 1:45 PM
Looks like ‘10% of MavenCentral users’ is ‘every project that is still active’
IMO, it's on Gradle/Maven, who should make it easier to share dependencies between installs. MavenCentral stuff is signed, so there's no risk in sharing them.
If CI servers could pull from other servers on the same network, and developers could pull from other developers in the same network,
If CI servers could pull from other servers on the same network, and developers could pull from other developers in the same network,
September 24, 2025 at 9:16 AM
IMO, it's on Gradle/Maven, who should make it easier to share dependencies between installs. MavenCentral stuff is signed, so there's no risk in sharing them.
If CI servers could pull from other servers on the same network, and developers could pull from other developers in the same network,
If CI servers could pull from other servers on the same network, and developers could pull from other developers in the same network,
More of the same (issues mentioning KtMongo, MavenCentral archives, unrelated OpenSavvy pages), the KtConf schedule,
September 2, 2025 at 1:39 PM
More of the same (issues mentioning KtMongo, MavenCentral archives, unrelated OpenSavvy pages), the KtConf schedule,
The GitLab repository appears first. Then, threads on the KotlinLang Slack archives and the MavenCentral sites. Then, the registration link to the talk I gave 6 months ago. Then, more MavenCentral sites.
September 2, 2025 at 1:39 PM
The GitLab repository appears first. Then, threads on the KotlinLang Slack archives and the MavenCentral sites. Then, the registration link to the talk I gave 6 months ago. Then, more MavenCentral sites.
Everything I've highlighted in red can come from MavenCentral metadata as a fallback.
It's really not much information that can't.
It's really not much information that can't.
August 7, 2025 at 1:02 PM
Everything I've highlighted in red can come from MavenCentral metadata as a fallback.
It's really not much information that can't.
It's really not much information that can't.
I'm considering lying in the MavenCentral metadata to make it seem like the project is developed on GitHub. I don't see another solution.
August 7, 2025 at 8:54 AM
I'm considering lying in the MavenCentral metadata to make it seem like the project is developed on GitHub. I don't see another solution.