Archives

Preventing Dependency Chain Attacks in Maven

using a whitelist of allowed dependency JARs and their SHAs

(tags: security whitelisting dependencies coding jar maven java jvm)