Skip to content

README.md

Latest commit

 

History

History
49 lines (33 loc) · 2.33 KB

README.md

File metadata and controls

49 lines (33 loc) · 2.33 KB
Raw

Plexus Security Dispatcher

Maven Central GitHub CI Reproducible Builds

Encrypts and decrypts passwords in Maven's settings.xml — the {...} values you get from mvn --encrypt-password. Ciphers and password sources are pluggable.

As of 4.x it also contains the cipher implementation itself; the separate plexus-cipher artifact is archived and should not be used for new work.

Status

Maintained, and 4.x requires Java 17, in step with Maven 4.

Because this handles credentials, please report any suspected vulnerability privately rather than in a public issue — see SECURITY.md.

Using it

<dependency>
  <groupId>org.codehaus.plexus</groupId>
  <artifactId>plexus-sec-dispatcher</artifactId>
</dependency>

Check the badge above for the current version.

If you are a Maven user rather than a tool author, you probably want the Maven password encryption guide instead — this artifact is the implementation behind it.

Requirements

Java 17 or later for 4.x.

Documentation

Contributing

See CONTRIBUTING.md. In short: mvn verify builds, and run mvn spotless:apply before pushing or CI will fail on formatting.