# JVCN Maven Plugin

Maven dependency verification & enforcement via the vChain Code Notary platform.

This package provides a maven plugin for verifying the integrity of your project dependencies through code notary.

# License

This software is released under GPL3.

# Usage

Add the following plugin-depdency to your maven project:


# Plugin configuration

The plugin provides some configuration options:

# failOnError (default: true)

Fails the maven build if a single dependency is not signed with the status TRUSTED on the code notary platform.

# transitive (default: false)

Analyses the entire dependency graph of your project. By default, only direct dependencies are analysed.

# requiredSigner (default: none)

Enforces that all checked dependencies must be signed by the provided signer.

# Requirements

The library requires a Java 8 JVM.