Packages / Fedora 43 / Unspecified / xmvn

Package: xmvn (4.3.0-21.fc43)

Local Extensions for Apache Maven

This package provides extensions for Apache Maven that can be used to manage system artifact repository and use it to resolve Maven artifacts in offline mode, as well as Maven plugins to help with creating RPM packages containing Maven artifacts.

Other Packages Related to xmvn:

  • dep: [maven]

    Java project management and project comprehension tool

  • dep: [xmvn-minimal] (= 4.3.0-21.fc43)

    Dependency-reduced version of XMvn

Download xmvn

ArchitecturePackage sizeInstalled sizeFilesPackage
noarch9.3 KiB4 Blist of filesDownload

Package file paths (1)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/bin/mvn-local

Field source: Fedora 43 Everything x86_64

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
4.3.0-21.fc4343 / everythingnoarchFedora 43 · Everything · x86_649.3 KiB4 BPackages/x/xmvn-4.3.0-21.fc43.noarch.rpm
4.3.0-21.fc4343 / everythingnoarchFedora 43 · Everything · aarch649.3 KiB4 BPackages/x/xmvn-4.3.0-21.fc43.noarch.rpm

Field source: Fedora 43 Everything x86_64

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

Last synced:

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

4.3.0-21.fc43 / noarchObserved Sep 1, 2026sha256 febc6e9e3997…36203747Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): febc6e9e39979352fb79a47a8767ea36d5610e83c95a537e5605796436203747

Verify download

printf '%s %s\n' 'febc6e9e39979352fb79a47a8767ea36d5610e83c95a537e5605796436203747' 'xmvn-4.3.0-21.fc43.noarch.rpm' | sha256sum --check --strict -

Field source: Fedora 43 Everything x86_64

4.3.0-21.fc43 / noarchObserved Sep 1, 2026sha256 febc6e9e3997…36203747Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): febc6e9e39979352fb79a47a8767ea36d5610e83c95a537e5605796436203747

Verify download

printf '%s %s\n' 'febc6e9e39979352fb79a47a8767ea36d5610e83c95a537e5605796436203747' 'xmvn-4.3.0-21.fc43.noarch.rpm' | sha256sum --check --strict -

Field source: Fedora 43 Everything aarch64

Sources

  • Authoritative source; repository metadata signature verified

    Signature evidence

    43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2

    Repository-signature verification record
    Signed-object SHA-256
    6c2a7b7225a6bd12acd5c95dcd0350a0a5929e195692ff68eb31db0ee6b9897b
    Keyring revision
    RPM-GPG-KEY-fedora-43-primary
    SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Result
    Recorded as verified; digest details unavailable
  • Authoritative source; repository metadata signature verified

    Signature evidence

    43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2

    Repository-signature verification record
    Signed-object SHA-256
    42c0002750de6066124693fff143f4854c1e29474d893f7e6a7616012d41338f
    Keyring revision
    RPM-GPG-KEY-fedora-43-primary
    SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Result
    Recorded as verified; digest details unavailable