Skip to content

Clarify sources for Java libraries #3045

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
s-stumbo merged 4 commits into from
Mar 4, 2026
Merged

Clarify sources for Java libraries #3045

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
ea64374
Clarify sources for Java libraries
s-stumbo Mar 4, 2026
55b6559
apply feedback
s-stumbo Mar 4, 2026
e7b0f22
apply feedback
s-stumbo Mar 4, 2026
cd8e74d
apply feedback
s-stumbo Mar 4, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
27 changes: 17 additions & 10 deletions content/chainguard/libraries/java/overview.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,16 +28,23 @@ Repository](https://central.sonatype.com/). It has been in operation for nearly
20 years and hosts artifacts of all releases of most open source projects in the
Java community. It is the default repository in all commonly used build tools
from the Java community including [Apache Maven](https://maven.apache.org/),
[Gradle](https://gradle.org/), and others and uses the Maven repository format.
Chainguard Libraries for Java covers all open source artifacts from Maven
Central.

Chainguard Libraries for Java also builds binaries for many other open source
projects available in other repositories or on code hosting platforms like
GitHub. Examples include Google, Oracle, JetBrains, CERN, Apache, and many
others. Any request for a library or library version missing in Chainguard
Libraries automatically triggers a process to provision the artifacts from
relevant sources if available.
[Gradle](https://gradle.org/), and others, and uses the Maven repository format.
Chainguard Libraries for Java covers a broad and growing set of artifacts from
Maven Central.

While Maven Central is the primary reference repository, Chainguard Libraries
for Java also builds binaries for open source projects available in other
repositories like the Google or Confluent repositories. This covers libraries
not found on Maven Central, sourced from
[Google](https://maven.google.com/web/index.html),
[Oracle](https://www.oracle.com/webfolder/application/maven/index.html),
[JetBrains](https://www.jetbrains.com/intellij-repository/releases),
CERN,
[Confluent](https://packages.confluent.io/maven/), [Gradle](https://plugins.gradle.org/m2/), and other public artifact repositories.
Note that coverage is not exhaustive for any single repository; the index
continues to grow, and any request for a missing library or version
automatically triggers a process to provision the artifacts from relevant
sources if available.

You can use Chainguard Libraries for Java alongside third-party software
repositories to create a single source of truth with your repository manager
Expand Down