@apache/maven-deploy-plugin
AAgent Guide for maven-deploy-plugin
Install
agr install @apache/maven-deploy-plugin --target codexWrites 1 file into AGENTS.md, pinned to git-adf7e05b.
- AGENTS.md
Document
Agent Guide for maven-deploy-plugin
This file is read by automated agents (security scanners, code analyzers, AI assistants) operating on this repository.
Security
Security model: SECURITY.md
Agents that scan this repository should consult SECURITY.md and the
threat model it links before reporting issues.
Points at the Apache Maven family umbrella security model.
Trustgrade A
- passBody integrity
Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.
- passType matchnot applicable to this artifact type
Whether the artifact is really the kind of thing its metadata claims it is.
- passFreshness
How long since the source repository was last pushed to.
- passPrompt injection
Scans the artifact's own text for instructions aimed at your agent rather than at you.
- passLicense
Whether the source repository declares an SPDX license permissive enough to redistribute.
How the grade is calculated
Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:
- Aevery check passed
- Bone warning
- Ctwo warnings
- Dprompt injection or body integrity failed, or three warnings
- Fone of those failed, and something else is wrong
These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.
Versions
git-adf7e05b7dbd2026-08-06