Automic VaultAutomic Vault

brew

使用 Homebrew, apk, chocolatey, apt, dnf, Nix, pacman, zypper, scoop 安装 maven

查看 maven 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装命令安全说明

代理安全

代理安全回答

maven builds Java projects and can deploy artifacts to package repositories.

凭据访问

Reads settings.xml credentials, environment variables, and repository auth.

远程变更

Can deploy artifacts and run plugins that call remote services.

发布/制品风险

Can publish jars, plugins, and release metadata.

推荐控制

Gate deploy, release plugins, and credentialed repository access.

代理使用指南

Allow test/package goals; require approval for deploy, release, and secret-backed plugin goals.

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install maven

local Homebrew formula metadata

Linux

Alpine Linux apk已验证 · 92%
sudo apk add maven

Alpine Linux edge package indexes · maven · 来源: dl-cdn.alpinelinux.org

Debian apt已验证 · 92%
sudo apt install maven

Debian stable package indexes · maven · 来源: deb.debian.org

Fedora dnf已验证 · 92%
sudo dnf install maven

Fedora Rawhide package metadata · maven · 来源: dl.fedoraproject.org

Nix已验证 · 92%
nix profile install nixpkgs#maven

nixpkgs package indexes · pkgs/by-name/ma/maven/package.nix · 来源: api.github.com

Arch Linux pacman已验证 · 92%
sudo pacman -S maven

Arch Linux sync databases · maven · 来源: geo.mirror.pkgbuild.com

openSUSE zypper已验证 · 92%
sudo zypper install maven

openSUSE Tumbleweed package metadata · maven · 来源: download.opensuse.org

Windows

Chocolatey已验证 · 92%
choco install maven

Chocolatey community package catalog · maven · 来源: community.chocolatey.org

Scoop已验证 · 92%
scoop install main/maven

Scoop official bucket manifest trees · bucket/maven.json · 来源: api.github.com

概览

软件包摘要

Java-based project management

命令和别名

  • mvn
  • mvnDebug
  • mvnyjp

历史

项目历史与用法

Apache Maven is the Apache Software Foundation's long-running Java build and project-management tool, centered on a project object model, dependency coordinates, plugins, and repository metadata.

项目历史

Maven's official site describes it as a build tool for Java projects that uses a Project Object Model to manage compilation, testing, and documentation. The Apache Maven source page also shows that the project is not a single repository in practice: full Maven sources span Maven core, plugins, components, skins, and related repositories, with a manifest repository used to check out the whole source tree.

The release history documents Maven 3 as the maintained general-availability line and Maven 4 as a long-running alpha, beta, and release-candidate effort. That makes Maven unusual among CLI build tools: the user-facing command is compact, but the surrounding ecosystem of plugins, resolver components, repository layout, and site tooling is large and separately versioned.

采用历史

Maven became a default packaging and dependency idiom for Java because its repository model is shared beyond Maven itself. Apache's Maven Central documentation explicitly addresses both projects that use Maven for builds and projects that only want their releases added to the central repository.

Homebrew, Debian-family, RPM-family, Chocolatey, Scoop, Nix, Pacman, and other package-manager entries in the input show Maven's broad CLI distribution footprint outside Java IDEs.

使用方式

Typical CLI use is `mvn` in a project containing a `pom.xml`, with per-user settings in `~/.m2/settings.xml` and project-local runner options in `.mvn/maven.config`, `.mvn/jvm.config`, and `.mvn/extensions.xml`. Credentials for remote repositories and mirrors live in the Maven settings model's `servers` entries, with encrypted-password support via `settings-security.xml`.

为什么软件包爱好者会关心

Maven matters to package nerds because it standardized much of the vocabulary of Java artifact packaging: groupId, artifactId, version, POM metadata, transitive dependency resolution, local caches, and central remote repositories. Even tools that compete with Maven frequently consume Maven repositories and Maven metadata.

时间线

  • 2002: Apache Maven site copyright history begins.
  • 2010: Maven 3 line begins and later becomes the long-lived GA family.
  • 2023: Maven 4 alpha releases appear in the official release history.
  • 2024: Maven 4 beta and release-candidate series begins.
  • 2026: Maven 3.9.x remains a maintained GA release line while Maven 4 release candidates continue.

Related projects

  • Maven Central, Maven Resolver, Maven plugins, Maven Wrapper, Maven Daemon, Gradle, Apache Ant, Apache Ivy

安全态势

风险级别：yellow

build system capable of executing project logic.

风险分类器

yellow 风险 · 高 置信度 · runtime

原因

  • build system capable of executing project logic

信号

  • override:maven

安装行为

  • formula 元数据中未记录 Homebrew post-install 钩子。
  • Homebrew bottle 元数据适用于 1 个平台目标。
  • 安装时包含 1 个运行时依赖。

建议审查

在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
~/.m2/settings.xml

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.m2/settings.xml

可执行文件

已安装的可执行文件

命令类型暴露范围备注
mvncli全局可执行文件
mvnDebugcli全局可执行文件
mvnyjpcli全局可执行文件

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。

页面生成时间2026-07-10
管理器版本3.9.16
管理器更新时间2026-05-17
本地数据OK
上游not checked
检测到的最新版本未检测到

https://maven.apache.org/

安装元数据

软件包元数据

软件包键brew:maven
版本3.9.16
软件包管理器Homebrew
软件包管理器页面https://formulae.brew.sh/formula/maven
主页https://maven.apache.org/
仓库https://gitbox.apache.org/repos/asf/maven.git
上游文档https://maven.apache.org/guides
许可证Apache-2.0
源码归档https://www.apache.org/dyn/closer.lua?path=maven/maven-3/3.9.16/binaries/apache-maven-3.9.16-bin.tar.gz
最后更新2026-05-17T19:11:46Z
Pulseupdated
依赖openjdk
Bottle可用 (于 all)
Homebrew post-install未定义
服务未声明

注册表事实

源数据库详情

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namemaven
Aliases
  • mvn
Version Scheme0
Revision0
Conflicts With
  • mvnvm
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

源数据库匹配

其他软件包管理器记录

匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。

Debian apt95%

libmaven3-core-java 3.9.9-1

Core libraries for Maven 3

http://maven.apache.org

sudo apt install libmaven3-core-java
  • Section: java
  • Architecture: all
  • Source Package: maven
  • 18 依赖
  • 1 可选依赖
  • normalized package name match
  • 匹配方式：Maven
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libmaven3-core-java from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

maven 3.9.9-1

Java software project management and comprehension tool

http://maven.apache.org

sudo apt install maven
  • Section: java
  • Architecture: all
  • 6 依赖
  • normalized package name match
  • 匹配方式：Maven
Debian stable package indexes · deb.debian.org · Debian stable package indexes: maven from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

maven

nix profile install nixpkgs#maven
  • normalized package name match
  • 匹配方式：Maven
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ma/maven/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

libmaven3-core-java 3.8.7-2

Core libraries for Maven 3

http://maven.apache.org

sudo apt install libmaven3-core-java
  • Section: universe/java
  • Architecture: all
  • Source Package: maven
  • 18 依赖
  • 1 可选依赖
  • normalized package name match
  • 匹配方式：Maven
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libmaven3-core-java from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

maven 3.8.7-2

Java software project management and comprehension tool

http://maven.apache.org

sudo apt install maven
  • Section: universe/java
  • Architecture: all
  • 6 依赖
  • normalized package name match
  • 匹配方式：Maven
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: maven from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

maven 3.9.16-r0

Java project management and project comprehension tool

https://maven.apache.org/

sudo apk add maven
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: maven
  • 1 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式：Maven
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: maven from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

maven 3.9.11-13.fc45

Java project management and project comprehension tool

https://maven.apache.org/

sudo dnf install maven
  • License: Apache-2.0 AND MIT
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: maven
  • 5 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式：Maven
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: maven from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

maven-lib 3.9.11-13.fc45

Core part of Maven

https://maven.apache.org/

sudo dnf install maven-lib
  • License: Apache-2.0 AND MIT
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: maven
  • 2 依赖
  • 4 提供
  • normalized package name match
  • 匹配方式：Maven
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: maven-lib from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

maven-openjdk25 3.9.11-13.fc45

maven binding for openjdk25

https://maven.apache.org/

sudo dnf install maven-openjdk25
  • License: Apache-2.0 AND MIT
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: maven
  • 3 依赖
  • 2 提供
  • normalized package name match
  • 匹配方式：Maven
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: maven-openjdk25 from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

maven-unbound 3.9.11-13.fc45

maven binding for unbound

https://maven.apache.org/

sudo dnf install maven-unbound
  • License: Apache-2.0 AND MIT
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: maven
  • 2 依赖
  • 2 提供
  • normalized package name match
  • 匹配方式：Maven
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: maven-unbound from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
pacman95%

maven 3.9.16-1

Java project management and project comprehension tool

https://maven.apache.org

sudo pacman -S maven
  • License: Apache-2.0
  • Architecture: any
  • 3 依赖
  • normalized package name match
  • 匹配方式：Maven
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: maven from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
zypper95%

maven 3.9.16-1.1

Java project management and project comprehension tool

https://maven.apache.org/

sudo zypper install maven
  • License: Apache-2.0 AND MIT
  • Category: Development/Tools/Building
  • Architecture: x86_64
  • Source Package: maven
  • 2 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式：Maven
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: maven from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
zypper95%

maven-javadoc 3.9.16-1.1

API documentation for maven

https://maven.apache.org/

sudo zypper install maven-javadoc
  • License: Apache-2.0 AND MIT
  • Category: Documentation/HTML
  • Architecture: noarch
  • Source Package: maven
  • 1 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式：Maven
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: maven-javadoc from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
zypper95%

maven-lib 3.9.16-1.1

Core part of Maven

https://maven.apache.org/

sudo zypper install maven-lib
  • License: Apache-2.0 AND MIT
  • Category: Development/Tools/Building
  • Architecture: x86_64
  • Source Package: maven
  • 32 依赖
  • 4 提供
  • normalized package name match
  • 匹配方式：Maven
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: maven-lib from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
Chocolatey95%

maven

choco install maven
  • normalized package name match
  • 匹配方式：Maven
Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: maven from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','lunacy'
Scoop95%

main/maven

scoop install main/maven
  • normalized package name match
  • 匹配方式：Maven
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/maven.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

软件包图谱

链接来自本地软件包关系图、补充数据、依赖边、生态匹配和软件包 hub 归属。

相关工具

  • openjdkRuntime dependency declared by Homebrew.
  • helidonPopular package that depends on this formula.

相同工作流

  • maven-shellShares av.db curated category or tags: build-tool, build-tools, cli, developer-tools, java.
  • antShares av.db curated category or tags: build-tool, build-tools, cli, developer-tools, java.
  • gradleShares av.db curated category or tags: build-tools, cli, dependency-management, developer-tools, java.
  • ivyShares av.db curated category or tags: build-tools, cli, dependency-management, developer-tools, java.
  • leiningenShares av.db curated category or tags: build-tool, build-tools, cli, dependency-management, developer-tools.
  • millShares av.db curated category or tags: build-tool, build-tools, cli, developer-tools, java.

来源线索

由仓库数据生成

此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated agent safety answer
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment