io.github.chains-project : maven-lockfile

maven-lockfile-plugin · This plugin is a state-of-the-art solution that can be used to validate the integrity of a maven repository. It does this by generating a lock file that contains the checksums of all the artifacts in the repository. The lock file can then be used to validate the integrity of the repository. This guards the supply chain against malicious actors that might tamper with the artifacts in the repository.

<!-- https://mavenlibs.com/maven/plugin/io.github.chains-project/maven-lockfile --><plugin>
    <groupId>io.github.chains-project</groupId>
    <artifactId>maven-lockfile</artifactId>
    <version>4.0.0</version>
</plugin>

<plugin>
    <groupId>io.github.chains-project</groupId>
    <artifactId>maven-lockfile</artifactId>
    <version>4.0.0</version>
</plugin>