Automic VaultAutomic Vault

brew

maven を Homebrew, apk, chocolatey, apt, dnf, Nix, pacman, zypper, scoop でインストール

maven のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

インストールコマンドセキュリティノート

エージェント安全性

エージェント安全性の回答

maven builds Java projects and can deploy artifacts to package repositories.

認証情報アクセス

Reads settings.xml credentials, environment variables, and repository auth.

リモート変更

Can deploy artifacts and run plugins that call remote services.

公開/成果物リスク

Can publish jars, plugins, and release metadata.

推奨コントロール

Gate deploy, release plugins, and credentialed repository access.

エージェント利用ガイダンス

Allow test/package goals; require approval for deploy, release, and secret-backed plugin goals.

インストール

追加のインストールコマンド

macOS

Homebrew確認済み · 100%
brew install maven

local Homebrew formula metadata

Linux

Alpine Linux apk確認済み · 92%
sudo apk add maven

Alpine Linux edge package indexes · maven · ソース: dl-cdn.alpinelinux.org

Debian apt確認済み · 92%
sudo apt install maven

Debian stable package indexes · maven · ソース: deb.debian.org

Fedora dnf確認済み · 92%
sudo dnf install maven

Fedora Rawhide package metadata · maven · ソース: dl.fedoraproject.org

Nix確認済み · 92%
nix profile install nixpkgs#maven

nixpkgs package indexes · pkgs/by-name/ma/maven/package.nix · ソース: api.github.com

Arch Linux pacman確認済み · 92%
sudo pacman -S maven

Arch Linux sync databases · maven · ソース: geo.mirror.pkgbuild.com

openSUSE zypper確認済み · 92%
sudo zypper install maven

openSUSE Tumbleweed package metadata · maven · ソース: download.opensuse.org

概要

パッケージ概要

Java-based project management

コマンドとエイリアス

  • mvn
  • mvnDebug
  • mvnyjp

履歴

プロジェクトの歴史と使われ方

Apache Maven is the Apache Software Foundation's long-running Java build and project-management tool, centered on a project object model, dependency coordinates, plugins, and repository metadata.

プロジェクトの歴史

Maven's official site describes it as a build tool for Java projects that uses a Project Object Model to manage compilation, testing, and documentation. The Apache Maven source page also shows that the project is not a single repository in practice: full Maven sources span Maven core, plugins, components, skins, and related repositories, with a manifest repository used to check out the whole source tree.

The release history documents Maven 3 as the maintained general-availability line and Maven 4 as a long-running alpha, beta, and release-candidate effort. That makes Maven unusual among CLI build tools: the user-facing command is compact, but the surrounding ecosystem of plugins, resolver components, repository layout, and site tooling is large and separately versioned.

採用の歴史

Maven became a default packaging and dependency idiom for Java because its repository model is shared beyond Maven itself. Apache's Maven Central documentation explicitly addresses both projects that use Maven for builds and projects that only want their releases added to the central repository.

Homebrew, Debian-family, RPM-family, Chocolatey, Scoop, Nix, Pacman, and other package-manager entries in the input show Maven's broad CLI distribution footprint outside Java IDEs.

使われ方

Typical CLI use is `mvn` in a project containing a `pom.xml`, with per-user settings in `~/.m2/settings.xml` and project-local runner options in `.mvn/maven.config`, `.mvn/jvm.config`, and `.mvn/extensions.xml`. Credentials for remote repositories and mirrors live in the Maven settings model's `servers` entries, with encrypted-password support via `settings-security.xml`.

パッケージ好きにとっての重要性

Maven matters to package nerds because it standardized much of the vocabulary of Java artifact packaging: groupId, artifactId, version, POM metadata, transitive dependency resolution, local caches, and central remote repositories. Even tools that compete with Maven frequently consume Maven repositories and Maven metadata.

タイムライン

  • 2002: Apache Maven site copyright history begins.
  • 2010: Maven 3 line begins and later becomes the long-lived GA family.
  • 2023: Maven 4 alpha releases appear in the official release history.
  • 2024: Maven 4 beta and release-candidate series begins.
  • 2026: Maven 3.9.x remains a maintained GA release line while Maven 4 release candidates continue.

Related projects

  • Maven Central, Maven Resolver, Maven plugins, Maven Wrapper, Maven Daemon, Gradle, Apache Ant, Apache Ivy

セキュリティ状態

リスクレベル: yellow

build system capable of executing project logic.

リスク分類器

リスク yellow · 信頼度 高 · runtime

理由

  • build system capable of executing project logic

信号

  • override:maven

インストール挙動

  • formula メタデータに Homebrew post-install フックは記録されていません。
  • Homebrew bottle メタデータは 1 個のプラットフォームターゲットで利用できます。
  • 1 件の実行時依存関係とともにインストールされます。

推奨レビュー

エージェントに無人実行させる前に、このツールが平文の認証情報を読むか、リモート状態を書き込むか、成果物を公開するか、プラグインを起動するかを確認してください。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
~/.m2/settings.xml

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.m2/settings.xml

実行可能ファイル

インストールされる実行可能ファイル

コマンド種類公開範囲メモ
mvncliグローバル実行可能ファイル
mvnDebugcliグローバル実行可能ファイル
mvnyjpcliグローバル実行可能ファイル

鮮度

バージョンと鮮度

これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。

ページ生成日2026-07-10
マネージャ版3.9.16
マネージャ更新日2026-05-17
ローカルデータOK
上流not checked
検出された最新未検出

https://maven.apache.org/

インストールメタデータ

パッケージメタデータ

パッケージキーbrew:maven
バージョン3.9.16
パッケージマネージャHomebrew
パッケージマネージャページhttps://formulae.brew.sh/formula/maven
ホームページhttps://maven.apache.org/
リポジトリhttps://gitbox.apache.org/repos/asf/maven.git
上流ドキュメントhttps://maven.apache.org/guides
ライセンスApache-2.0
ソースアーカイブhttps://www.apache.org/dyn/closer.lua?path=maven/maven-3/3.9.16/binaries/apache-maven-3.9.16-bin.tar.gz
最終更新2026-05-17T19:11:46Z
Pulseupdated
依存関係openjdk
Bottle利用可能 (対象 all)
Homebrew post-install未定義
サービス宣言なし

レジストリ情報

ソースデータベース詳細

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namemaven
Aliases
  • mvn
Version Scheme0
Revision0
Conflicts With
  • mvnvm
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

ソースデータベース一致

他のパッケージマネージャ記録

一致は外部パッケージマネージャインデックスから取得され、ローカルの Automic Vault パッケージリンクとは分けて表示されます。

Debian apt95%

libmaven3-core-java 3.9.9-1

Core libraries for Maven 3

http://maven.apache.org

sudo apt install libmaven3-core-java
  • Section: java
  • Architecture: all
  • Source Package: maven
  • 18 依存関係
  • 1 任意依存関係
  • normalized package name match
  • 一致条件: Maven
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libmaven3-core-java from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

maven 3.9.9-1

Java software project management and comprehension tool

http://maven.apache.org

sudo apt install maven
  • Section: java
  • Architecture: all
  • 6 依存関係
  • normalized package name match
  • 一致条件: Maven
Debian stable package indexes · deb.debian.org · Debian stable package indexes: maven from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

maven

nix profile install nixpkgs#maven
  • normalized package name match
  • 一致条件: Maven
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ma/maven/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

libmaven3-core-java 3.8.7-2

Core libraries for Maven 3

http://maven.apache.org

sudo apt install libmaven3-core-java
  • Section: universe/java
  • Architecture: all
  • Source Package: maven
  • 18 依存関係
  • 1 任意依存関係
  • normalized package name match
  • 一致条件: Maven
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libmaven3-core-java from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

maven 3.8.7-2

Java software project management and comprehension tool

http://maven.apache.org

sudo apt install maven
  • Section: universe/java
  • Architecture: all
  • 6 依存関係
  • normalized package name match
  • 一致条件: Maven
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: maven from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

maven 3.9.16-r0

Java project management and project comprehension tool

https://maven.apache.org/

sudo apk add maven
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: maven
  • 1 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Maven
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: maven from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

maven 3.9.11-13.fc45

Java project management and project comprehension tool

https://maven.apache.org/

sudo dnf install maven
  • License: Apache-2.0 AND MIT
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: maven
  • 5 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Maven
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: maven from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

maven-lib 3.9.11-13.fc45

Core part of Maven

https://maven.apache.org/

sudo dnf install maven-lib
  • License: Apache-2.0 AND MIT
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: maven
  • 2 依存関係
  • 4 提供
  • normalized package name match
  • 一致条件: Maven
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: maven-lib from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

maven-openjdk25 3.9.11-13.fc45

maven binding for openjdk25

https://maven.apache.org/

sudo dnf install maven-openjdk25
  • License: Apache-2.0 AND MIT
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: maven
  • 3 依存関係
  • 2 提供
  • normalized package name match
  • 一致条件: Maven
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: maven-openjdk25 from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

maven-unbound 3.9.11-13.fc45

maven binding for unbound

https://maven.apache.org/

sudo dnf install maven-unbound
  • License: Apache-2.0 AND MIT
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: maven
  • 2 依存関係
  • 2 提供
  • normalized package name match
  • 一致条件: Maven
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: maven-unbound from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
pacman95%

maven 3.9.16-1

Java project management and project comprehension tool

https://maven.apache.org

sudo pacman -S maven
  • License: Apache-2.0
  • Architecture: any
  • 3 依存関係
  • normalized package name match
  • 一致条件: Maven
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: maven from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
zypper95%

maven 3.9.16-1.1

Java project management and project comprehension tool

https://maven.apache.org/

sudo zypper install maven
  • License: Apache-2.0 AND MIT
  • Category: Development/Tools/Building
  • Architecture: x86_64
  • Source Package: maven
  • 2 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Maven
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: maven from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
zypper95%

maven-javadoc 3.9.16-1.1

API documentation for maven

https://maven.apache.org/

sudo zypper install maven-javadoc
  • License: Apache-2.0 AND MIT
  • Category: Documentation/HTML
  • Architecture: noarch
  • Source Package: maven
  • 1 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Maven
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: maven-javadoc from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
zypper95%

maven-lib 3.9.16-1.1

Core part of Maven

https://maven.apache.org/

sudo zypper install maven-lib
  • License: Apache-2.0 AND MIT
  • Category: Development/Tools/Building
  • Architecture: x86_64
  • Source Package: maven
  • 32 依存関係
  • 4 提供
  • normalized package name match
  • 一致条件: Maven
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: maven-lib from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
Chocolatey95%

maven

choco install maven
  • normalized package name match
  • 一致条件: Maven
Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: maven from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','lunacy'
Scoop95%

main/maven

scoop install main/maven
  • normalized package name match
  • 一致条件: Maven
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/maven.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

パッケージグラフ

リンクは、ローカルのパッケージ関係グラフ、補足データ、依存関係、エコシステム一致、パッケージハブ所属から来ています。

関連ツール

  • openjdkRuntime dependency declared by Homebrew.
  • helidonPopular package that depends on this formula.

同じワークフロー

  • maven-shellShares av.db curated category or tags: build-tool, build-tools, cli, developer-tools, java.
  • antShares av.db curated category or tags: build-tool, build-tools, cli, developer-tools, java.
  • gradleShares av.db curated category or tags: build-tools, cli, dependency-management, developer-tools, java.
  • ivyShares av.db curated category or tags: build-tools, cli, dependency-management, developer-tools, java.
  • leiningenShares av.db curated category or tags: build-tool, build-tools, cli, dependency-management, developer-tools.
  • millShares av.db curated category or tags: build-tool, build-tools, cli, developer-tools, java.

エージェント安全ガイド

ソース経路

リポジトリデータから生成

このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。

使用ソース

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated agent safety answer
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment