

To apply verification, add the expectedįile's SHA-256 sum in hex notation, using only small caps, to Is possible to specify checksums for both the maven-wrapper.jar and To avoid supply-chain-attacks by downloading a corrupted artifact, it

Checksum verification of downloaded binaries If not set, but your mirror URL in your settings.xml is configured, it will be Maven-wrapper-plugin, the URL is used in the maven-wrapper.properties file. If MVNW_REPOURL is set during the wrapper installation with the

If your project is not allowed to contain binary files like this, you can It is used to bootstrap theĭownload and invocation of Maven from the wrapper shell scripts. Usage without Binary JARīy default, the Maven Wrapper JAR archive is added to the using project as smallīinary file. Is activated by setting the MVNW_VERBOSE environment variable to true.īy default it is off. The wrapper supports a verbose mode in which it outputs further information. The maven-wrapper.jar (to download and install target Maven version required by mvnw) and the Maven Wrapper Plugin (to inject Wrapper into a project) use Java 7. Plan to support the deprecated, EOL'ed Maven 2.x. In terms of Apache Maven versions itself, the wrapper should work with any Mavenģ.x version and it defaults to the release used when setting up the wrapper. Linux (numerous versions, tested on Ubuntu and CentOS)Ī POSIX-compatible Bourne shell is required to run the wrapper script.The wrapper should work on various operating systems including Subsequent uses of mvnw/ mvnw.cmd use the previously downloaded, specific mvn/wrapper/maven-wrapper.properties it will be downloaded for the user User doesn't have the necessary version of Maven specified in

A normal Maven build will be executed, with the one important change that if the
