The Apache Maven team is pleased to announce the release of the Apache Maven GPG Plugin, version 1.5
This plugin signs all of the project's attached artifacts with GnuPG. http://maven.apache.org/plugins/maven-gpg-plugin/ You should specify the version in your project's plugin configuration: <plugin> <groupId>org.apache.maven.plugins</groupId> <artifactId>maven-gpg-plugin</artifactId> <version>1.5</version> </plugin> Release Notes - Maven GPG Plugin - Version 1.5 ** Bug * [MGPG-41] - Passphrase revealed when backspacing at prompt ** Improvement * [MGPG-48] - useAgent=true by default * [MGPG-49] - Add support for --lock-* command line options ** Task * [MGPG-39] - use maven-plugin-tools' java 5 annotations Enjoy, -The Apache Maven team