Maven-Project

This initiative supports Apache Maven, a widely used build and project management tool in the Java ecosystem. Maven automates compiling, testing, and packaging Java projects while managing dependencies through a central repository. It uses a plugin system for extended functionality and defines project structure via a standard project descriptor (pom.xml). Maven is integral to the build processes of many critical infrastructures, both open-source and enterprise-level. Its extensive adoption and compatibility make it essential for the Java development community. Apache Maven is used globally in approximately 75% of all Java projects, including in critical sectors such as banking, public services, and energy supply. As Java has been one of the most used programming languages for over 25 years, Maven is a vital component of the world’s critical infrastructure. Maven’s 15 most-used plugins are downloaded an average of 1.97 billion times yearly. The Open Source Security Foundation, in collaboration with Google and Microsoft, has listed Maven as one of the 100 most important critical opensource software projects. Despite its significance, there are currently no developers working on Maven full-time. This initiative addresses several critical issues with Apache Maven, including the need for full-time developers, outdated documentation, and the need for maintenance and security updates. Currently, Maven is maintained by volunteers, a situation that needs to be improved given its widespread use and importance. This initiative will implement critical maintenance, restructuring, and security bug fixes to ensure the tool’s stability and usability. All that is needed to fulfill important (future) restrictions of Executive Order 14028 in the US or the EU's Cyber Resilience Act.