What this plugin is
The Maven Compiler Plugin is the standard plugin Maven uses to compile Java sources. It wires the JDK compiler into the Maven lifecycle and exposes the options every Java team relies on — target Java release, annotation processors, module path handling, and incremental compilation.
Why it matters
Every Maven-built Java artifact passes through this plugin. A defect or regression here changes the bytecode that ships to production for thousands of downstream projects on the same day a new release is published.
Open Elements' role
Open Elements contributes to the Maven Compiler Plugin through the Support & Care programme — security response, releases, and maintenance — and tracks its security posture publicly through Open Ingredients.
| Component | Version | License | Status | Severities |
|---|---|---|---|---|
| aopalliance | 1.0 | — | ||
| asm | 9.6 | BSD-3-Clause | outdated | |
| cdi-api | 1.2 | Apache-2.0 | outdated | |
| checker-qual | 3.33.0 | MIT | outdated | |
| commons-io | 2.11.0 | Apache-2.0 | outdated | |
| commons-lang3 | 3.8.1 | Apache-2.0 | outdated | |
| error_prone_annotations | 2.18.0 | Apache-2.0 | outdated | |
| failureaccess | 1.0.1 | Apache-2.0 | outdated | |
| guava | 32.0.1-jre | Apache-2.0 | outdated | |
| guice | 4.2.1 | Apache-2.0 | outdated | |
| j2objc-annotations | 2.8 | Apache-2.0 | outdated | |
| javax.annotation-api | 1.2 | — | outdated | |
| javax.inject | 1 | Apache-2.0 | ||
| jsr305 | 3.0.2 | Apache-2.0 | ||
| listenablefuture | 9999.0-empty-to-avoid-conflict-with-guava | Apache-2.0 | ||
| maven-artifact | 3.6.3 | Apache-2.0 | outdated | |
| maven-builder-support | 3.6.3 | Apache-2.0 | outdated | |
| maven-core | 3.6.3 | Apache-2.0 | outdated | |
| maven-model | 3.6.3 | Apache-2.0 | outdated | |
| maven-model-builder | 3.6.3 | Apache-2.0 | outdated | |
| maven-plugin-annotations | 3.10.2 | Apache-2.0 | outdated | |
| maven-plugin-api | 3.6.3 | Apache-2.0 | outdated | |
| maven-repository-metadata | 3.6.3 | Apache-2.0 | outdated | |
| maven-resolver-api | 1.4.1 | Apache-2.0 | outdated | |
| maven-resolver-impl | 1.4.1 | Apache-2.0 | outdated |
CycloneDX 1.x. Re-generated server-side; no registration required.
Talk to Support & Care