Maven - Enforcer

Maven enforcer

https://maven.apache.org/enforcer/maven-enforcer-plugin/index.html

Example showing the use of enforcer to make the application use only approved versions of libraries.

<!--   Note use this enforcer config in target projects
 if your project is already using this plugin, just add the <exclude> and <include> below -->
<plugin>
    <groupId>org.apache.maven.plugins</groupId>
    <artifactId>maven-enforcer-plugin</artifactId>
    <version>3.1.0</version>
    <executions>
        <execution>
            <id>enforce-banned-dependencies</id>
            <goals>
                <goal>enforce</goal>
            </goals>
            <configuration>
                <rules>
                    <bannedDependencies>
                        <excludes>
                            <!-- blacklist all org.bouncycastle -->
                            <exclude>org.bouncycastle</exclude>
                        </excludes>
                        <includes>
                            <!--whitelist fips bouncycastle-->
                            <include>org.bouncycastle:*fips*</include>
                        </includes>
                    </bannedDependencies>
                </rules>
                <fail>true</fail>
            </configuration>
        </execution>
    </executions>
</plugin>

Example showing the use of enforcer to make sure that the application is using the most updated version of a library.

<plugin>
    <groupId>org.apache.maven.plugins</groupId>
    <artifactId>maven-enforcer-plugin</artifactId>
    <version>3.1.0</version>
    <executions>
        <execution>
            <id>enforce-common-library-latest-version</id>
            <phase>validate</phase>
            <goals>
                <goal>enforce</goal>
            </goals>
            <configuration>
                <rules>
                    <maxDependencyUpdates>
                        <maxUpdates>0</maxUpdates>
                        <dependencyIncludes>
                            <dependencyInclude>
                                com.companyname:common-libraryname
                            </dependencyInclude>
                        </dependencyIncludes>
                        <processDependencyManagement>false</processDependencyManagement>
                        <processDependencyManagementTransitive>false</processDependencyManagementTransitive>
                        <processPluginDependencies>false</processPluginDependencies>
                        <processPluginDependenciesInPluginManagement>false</processPluginDependenciesInPluginManagement>
                    </maxDependencyUpdates>
                </rules>
                <fail>true</fail>
            </configuration>
        </execution>
    </executions>
</plugin>