raeva.io
v0.4.1 · available now

Reproducible builds for Maven.

Raeva reads the pom.xml you already have and writes rv.lock: every dependency pinned to an exact version and a SHA-256 checksum, so the same build resolves the same bytes on every machine. Maven itself stays exactly as it is.

One native binary. Open source. No JVM required to run rv.

Checked against mvn dependency:list on 46 open-source projects, including netty, spring-ai, and jenkins: the same dependency set on all 1,309 modules. How it was tested.

Install for macOS / Linux
curl -fsSL https://raeva.io/install.sh | sh

The installer selects the right CPU build. MSI, ZIP, and tarball downloads are on GitHub releases.

Raeva Cloud · design-partner alpha

A hosted private Maven registry with immutable releases, backed by Cloudflare R2. It is a repository URL and a token, so it works with rv and with plain Maven or Gradle, unchanged. We are onboarding a small group of design partners.

Free
The rv CLI, forever, no account. Lockfiles for single modules and full reactors, offline export, vulnerability scanning, and SBOMs on your own machine.
Team · per org
A private Maven registry with immutable releases and organization-wide token management. Design partners shape what ships next.
Enterprise
A dedicated deployment that stores artifacts in your own R2 or S3 bucket, with support. Audit log export and single sign-on are planned.
reproducibility
Reports that prove every CI run resolved exactly the bytes pinned in rv.lock. In design.

Free for individuals. Flat annual pricing per organization.

We onboard teams by hand and reply to every request. Rather talk first? Write to [email protected].