A custom external dependency loader is prepended to easily reduce the package size.
1.4-SNAPSHOT introduced a repository whitelist mechanism to try to avoid some untrusted repositories from loading malicious dependencies.
You need to add the following parameters to the Java startup parameters to enable it normally.
--add-opens=java.base/java.net=ALL-UNNAMED
Then download MavenLoader and put it in the Server plugin directory. It is recommended to keep MavenLoader the latest version.
Please confirm whether the plugin that relies on MavenLoaderAPI loads trusted dependencies and pay attention to safety.
Docs in: DEVELOPER_DOCS
Updater API in: USE_UPDATER
Example in: MavenLoader-Example
maven.ymlmaven.yml support platform, reference-load keyword. Remove external API (now only allow maven.yml)enable_whitelist: true # Enable repository whitelist, default is true
# repository whitelist list
whitelist:
- https://repo.maven.apache.org/maven2
- https://repo.maven.apache.org/maven2
- https://oss.sonatype.org/content/groups/public/
- https://repository.jboss.org/nexus/content/groups/public
- https://maven-central-asia.storage-download.googleapis.com/maven2/
- https://maven-central-eu.storage-download.googleapis.com/maven2/
- https://maven-central.storage-download.googleapis.com/maven2/
- https://jitpack.io
- https://hub.spigotmc.org/nexus/content/repositories/snapshots/
- https://repo.papermc.io/repository/maven-public/
- https://repo.repsy.io/mvn/rdb/default
updater:
check: true
source: github # Update Channel, Support: github, spigot, spiget
When you wear armor with gold patterns, the effect is the same as wearing gold armor.
When you wear armor with gold patterns, the effect is the same as wearing gold armor.
