Maven Security Issues

Are there any security issues when using Maven? I use Ant today for my main project, but I use Maven for my sample project, where I write software splashes. I like some parts of Maven, but there is a problem loading my cans through the tool. Is this an unreasonable problem? How safe is "http://repo1.maven.org/maven2/"? Is there a safer way to use the tool?

Thank.

+3
source share
1 answer

It is pretty safe and standard. If the security of http://repo1.maven.org/maven2/ is ever compromised, there will be a great deal of resonance in Java developers. I have never heard that this site has been hacked.

However, you are not limited to the default repository. You can set up your own repository using Nexus , Artifactory and install secure artifacts for them. You can also block remote repositories using the Nexus / Artifactory setting. Although, I never had to do this. But look here , perhaps it is possible.

, , "repo1", .

1:

+1

Source: https://habr.com/ru/post/1792448/


All Articles