Credential-Zugriff
Reads settings.xml credentials, environment variables, and repository auth.
brew / Rang 207
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für maven in AI-Agent-Workflows.
Agent-Sicherheit
maven builds Java projects and can deploy artifacts to package repositories.
Reads settings.xml credentials, environment variables, and repository auth.
Can deploy artifacts and run plugins that call remote services.
Can publish jars, plugins, and release metadata.
Gate deploy, release plugins, and credentialed repository access.
Allow test/package goals; require approval for deploy, release, and secret-backed plugin goals.
Installation
brew install mavenprovider-native install command
Überblick
Java-based project management
Verlauf
Apache Maven is the Apache Software Foundation's long-running Java build and project-management tool, centered on a project object model, dependency coordinates, plugins, and repository metadata.
Maven's official site describes it as a build tool for Java projects that uses a Project Object Model to manage compilation, testing, and documentation. The Apache Maven source page also shows that the project is not a single repository in practice: full Maven sources span Maven core, plugins, components, skins, and related repositories, with a manifest repository used to check out the whole source tree.
The release history documents Maven 3 as the maintained general-availability line and Maven 4 as a long-running alpha, beta, and release-candidate effort. That makes Maven unusual among CLI build tools: the user-facing command is compact, but the surrounding ecosystem of plugins, resolver components, repository layout, and site tooling is large and separately versioned.
Maven became a default packaging and dependency idiom for Java because its repository model is shared beyond Maven itself. Apache's Maven Central documentation explicitly addresses both projects that use Maven for builds and projects that only want their releases added to the central repository.
Homebrew, Debian-family, RPM-family, Chocolatey, Scoop, Nix, Pacman, and other package-manager entries in the input show Maven's broad CLI distribution footprint outside Java IDEs.
Typical CLI use is `mvn` in a project containing a `pom.xml`, with per-user settings in `~/.m2/settings.xml` and project-local runner options in `.mvn/maven.config`, `.mvn/jvm.config`, and `.mvn/extensions.xml`. Credentials for remote repositories and mirrors live in the Maven settings model's `servers` entries, with encrypted-password support via `settings-security.xml`.
Maven matters to package nerds because it standardized much of the vocabulary of Java artifact packaging: groupId, artifactId, version, POM metadata, transitive dependency resolution, local caches, and central remote repositories. Even tools that compete with Maven frequently consume Maven repositories and Maven metadata.
Sicherheitslage
build system capable of executing project logic.
yellow Risiko · hoch Konfidenz · runtime
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
~/.m2/settings.xmlCredential-bearing paths to review before unattended agent runs.
~/.m2/settings.xmlExecutables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
mvn | Executable | indexiertes Executable | Aus dem lokalen Executable-Index erkannt. |
mvnDebug | Executable | indexiertes Executable | Aus dem lokalen Executable-Index erkannt. |
mvnyjp | Executable | indexiertes Executable | Aus dem lokalen Executable-Index erkannt. |
Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
Installationsmetadaten
| Paketschlüssel | brew:maven |
|---|---|
| Version | 3.9.16 |
| Paketmanager | Homebrew |
| Homepage | https://maven.apache.org/ |
| Zuletzt aktualisiert | 2026-05-17T19:11:46Z |
| Pulse | updated |
| Bottle | nicht erfasst |
| Dienst | keiner deklariert |
Quellspur
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
View the package source record on GitHub.