What this plugin is

The Maven Install Plugin runs in the `install` phase and copies a build's artifacts (`.jar`, `.pom`, attached classifiers) into the local Maven repository. Local repository state is what every subsequent build on the same machine — including downstream multi-module reactor builds — resolves against.

Why it matters

Compromise of the install path can poison every dependent build on the same developer machine or CI worker. Even subtle metadata bugs (incorrect checksums, missing signatures) erode the trust contract between the local repository and Maven Central.

Open Elements' role

Open Elements contributes to the Maven Install Plugin under the Support & Care programme and surfaces its security state via Open Ingredients.