Maven Central
central.sonatype.com
Spec sheet
- Support
- Publishers can contact [email protected] for usage reviews, higher limits, exemptions or commercial-scale publishing guidance.Read 1 Oct 2026 · central.sonatype.org
- Headquarters
- 8161 Maple Lawn Blvd #250, Fulton, MD 20759, United StatesRead 28 Sep 2026 · central.sonatype.com
- Account login
- The Central Portal supports Google and GitHub social logins as well as username and password accounts.Read 1 Oct 2026 · central.sonatype.org
- Component discovery
- The Maven Central website provides OSS component search, browsing, popular packages, namespaces and categories.Read 1 Oct 2026 · central.sonatype.com
- Default repository
- The Central Repository is the default repository for Apache Maven, SBT and other build systems.Read 1 Oct 2026 · central.sonatype.org
- Immutability
- Published components are not removed or modified, and checksums and GPG signatures help users verify component identity.Read 1 Oct 2026 · central.sonatype.org
- Partner program
- Maven Central partners can receive exposure, Sonatype partner certification and joint marketing opportunities.Read 1 Oct 2026 · central.sonatype.com
- Publishing authentication
- Maven publishing requires user-token credentials configured in settings.xml.Read 1 Oct 2026 · central.sonatype.org
- Publishing validation
- Uploaded components are validated against Maven Central requirements before publication.Read 1 Oct 2026 · central.sonatype.org
- Publishing workflow
- The Central Publisher Portal supports publishing through Maven using the central-publishing-maven-plugin.Read 1 Oct 2026 · central.sonatype.org
- Repository purpose
- The Central Repository is a public distribution platform for release-ready community open-source software in the Java ecosystem.Read 1 Oct 2026 · central.sonatype.org
- Security limitation
- Sonatype says it does not pre-screen materials and cannot guarantee the safety of components in Maven Central.Read 1 Oct 2026 · central.sonatype.org
- Security transport
- HTTPS connections to Central are intended to prevent man-in-the-middle attacks against artifact downloads.Read 1 Oct 2026 · central.sonatype.org
- Tool integrations
- Central can be used from Apache Ant/Ivy, Gradle and many other tools.Read 1 Oct 2026 · central.sonatype.org
- Usage monitoring
- The Usage Center shows organization-level release size, file count and release count metrics.Read 1 Oct 2026 · central.sonatype.org
- Vulnerability intelligence
- Sonatype maintains a database of known vulnerabilities for Central artifacts through Nexus Lifecycle, with a limited version in Nexus Repository Manager Repository Health Check.Read 1 Oct 2026 · central.sonatype.org
Plans and prices
Free Free ordinary community open-source publishing · monthly file-count, release-size and release-count limits · higher-limit or exemption review available Read 1 Oct 2026 · central.sonatype.org
Maven Central Publisher Pro Priced on request higher publishing capacity · dedicated support · required for commercial-nature artifacts from October 1, 2026 Read 1 Oct 2026 · sonatype.com
Where Specifiction places it
- Package Registries#16 of 287.8
