Maven Central

What Maven Central is

Maven Central is a public distribution platform for release-ready community open-source software in the Java ecosystem. It is the default repository for Apache Maven, SBT and other build systems, and can also be used through Apache Ant/Ivy, Gradle and other tools. Its website lets users search and browse components, popular packages, namespaces and categories. Publishers can submit releases through Maven using the central-publishing-maven-plugin; publishing requires user-token credentials configured in settings.xml, and uploads are checked against repository requirements. The free plan supports ordinary community open-source publishing, subject to monthly file-count, release-size and release-count limits. Reviews for higher limits or exemptions are available. Published components are not removed or modified, and checksums and GPG signatures help users confirm component identity. HTTPS is intended to protect artifact downloads from man-in-the-middle attacks, but Sonatype does not pre-screen materials or guarantee component safety. Sonatype maintains known-vulnerability information through Nexus Lifecycle and a limited version in Nexus Repository Manager Repository Health Check. The site also offers a Usage Center with organization-level release metrics.