4.0.0 io.github.chains-project maven-lockfile 5.18.7-SNAPSHOT maven-plugin maven-lockfile-plugin This plugin is a state-of-the-art solution that can be used to validate the integrity of a maven repository. It does this by generating a lock file that contains the checksums of all the artifacts and plugins in the repository. The lock file can then be used to validate the integrity of the repository. This guards the supply chain against malicious actors that might tamper with the artifacts in the repository. https://github.com/chains-project/maven-lockfile 2023 MIT https://opensource.org/licenses/MIT repo MartinWitt Martin Wittlinger 3.2.5 scm:git:https://github.com/chains-project/maven-lockfile scm:git:https://github.com/chains-project/maven-lockfile.git v${project.version} https://github.com/chains-project/maven-lockfile/tree/${project.scm.tag} 3.9.11 11 2026-10-15T22:53:04Z UTF-8 true org.codehaus.plexus plexus-utils 4.1.0 org.apache.maven maven-plugin-api ${mavenVersion} provided org.codehaus.plexus plexus-xml 4.2.0 provided org.apache.maven.plugin-tools maven-plugin-annotations 3.16.0 provided org.junit.jupiter junit-jupiter-api 6.1.3 test org.apache.maven maven-core ${mavenVersion} provided com.google.code.gson gson 2.14.0 org.apache.maven.resolver maven-resolver-api 2.0.24 org.apache.maven.plugin-testing maven-plugin-testing-harness 4.0.0-beta-4 test org.apache.maven maven-compat 3.9.6 test org.junit.jupiter junit-jupiter-engine 6.1.3 test org.assertj assertj-core 3.27.7 test org.apache.logging.log4j log4j-core 2.26.1 com.soebes.itf.jupiter.extension itf-jupiter-extension 0.13.1 test com.soebes.itf.jupiter.extension itf-assertj 0.13.1 test org.instancio instancio-junit 5.6.0 test com.google.guava guava 33.5.0-jre org.apache.maven.shared maven-dependency-tree 3.3.0 org.apache.maven.shared maven-artifact-transfer 0.13.1 org.apache.maven maven-model ${mavenVersion} provided org.apache.maven maven-artifact ${mavenVersion} provided commons-io commons-io 2.22.0 test org.cyclonedx cyclonedx-maven-plugin 2.9.3 true true makeBom package dev.sigstore sigstore-maven-plugin 2.0.0 ${sigstore.skip} sign sign org.apache.maven.plugins maven-artifact-plugin 3.7.0 com.diffplug.spotless spotless-maven-plugin 3.1.0 .gitignore false true 4 pom.xml org.apache.maven.plugins maven-deploy-plugin 3.2.0 org.codehaus.gmavenplus gmavenplus-plugin 4.3.1 org.apache.groovy groovy 5.0.3 runtime execute generate-resources org.apache.maven.plugins maven-resources-plugin 3.5.0 ${project.basedir} ./template/ action.yml true ./template/ extensions.xml .mvn true UTF-8 default-resources none default-testResources none copy-main-resources copy-resources process-resources ${project.build.outputDirectory} ${project.basedir}/src/main/resources org.apache.maven.plugins maven-compiler-plugin 3.16.0 org.apache.maven.plugins maven-enforcer-plugin 3.6.3 enforce-plugin-versions enforce Best Practice is to always define plugin versions! true true true clean,deploy,site org.apache.maven.plugins:maven-reactor-plugin org.apache.maven.plugins:maven-enforcer-plugin,org.apache.maven.plugins:maven-idea-plugin,org.apache.maven.plugins:maven-reactor-plugin org.apache.maven.plugins maven-site-plugin 3.22.0 org.apache.maven.plugins maven-clean-plugin 3.5.0 org.apache.maven.plugins maven-install-plugin 3.2.0 org.apache.maven.plugins maven-surefire-plugin 3.6.0 org.apache.maven.plugins maven-jar-plugin 3.5.1 test-jar test-jar org.apache.maven.plugins maven-plugin-plugin 3.16.0 configurator mojo-descriptor descriptor com.soebes.itf.jupiter.extension itf-maven-plugin 0.13.1 installing install resources-its pre-integration-test maven-failsafe-plugin 3.6.0 ${maven.version} ${maven.home} junit.jupiter.execution.parallel.enabled=true junit.jupiter.execution.parallel.mode.default=concurrent junit.jupiter.execution.parallel.mode.classes.default=same_thread junit.jupiter.execution.parallel.config.strategy=fixed junit.jupiter.execution.parallel.config.fixed.parallelism=6 2 integration-test verify publication org.apache.maven.plugins maven-javadoc-plugin 3.12.0 attach-javadocs jar true org.apache.maven.plugins maven-source-plugin 3.4.0 attach-sources jar true org.apache.maven.plugins maven-deploy-plugin 3.2.0