Reproducible builds for Maven.
Raeva reads the pom.xml you already have and writes
rv.lock: every dependency pinned to an exact version and a
SHA-256 checksum, so the same build resolves the same bytes on every
machine. Maven itself stays exactly as it is.
One native binary. Open source. No JVM required to run rv.
Checked against mvn dependency:list on 46 open-source projects,
including netty, spring-ai, and jenkins: the same dependency set on all
1,309 modules.
How it was tested.
curl -fsSL https://raeva.io/install.sh | sh
The installer selects the right CPU build. MSI, ZIP, and tarball downloads are on GitHub releases.
A hosted private Maven registry with immutable releases, backed by
Cloudflare R2. It is a repository URL and a token, so it works with
rv and with plain Maven or Gradle, unchanged. We are
onboarding a small group of design partners.
- Free
- The
rvCLI, forever, no account. Lockfiles for single modules and full reactors, offline export, vulnerability scanning, and SBOMs on your own machine. - Team · per org
- A private Maven registry with immutable releases and organization-wide token management. Design partners shape what ships next.
- Enterprise
- A dedicated deployment that stores artifacts in your own R2 or S3 bucket, with support. Audit log export and single sign-on are planned.
- reproducibility
- Reports that prove every CI run resolved exactly the bytes pinned in rv.lock. In design.
Free for individuals. Flat annual pricing per organization.
We onboard teams by hand and reply to every request. Rather talk first? Write to [email protected].