Search Gradle plugins

Adds a Maven-style META-INF/maven/<groupId>/<artifactId>/pom.properties to the main jar, wired by convention from the project's group, name and version so Maven-aware tooling (SBOM generators, classpath inspectors, security scanners) can identify the artifact a jar belongs to. The generated file is deterministic with no timestamp, keeping archives reproducible.

• #maven
• #pom
• #metadata
• #sbom
• #packaging

Compiles Souther sources in a Gradle build. The compiler is not linked: the Souther version the project names is resolved and run in isolation, so this plugin and the Souther it runs are released separately.

• #souther
• #jvm
• #domain-model
• #code-generation

Opinionated convention plugin for production-ready Spring Boot microservices. Pre-configures Kotlin, Spring Cloud, Netflix DGS (GraphQL), MapStruct, Spotless code formatting, testing stack (JUnit 5, assertk, awaitility), and semantic versioning — so you can focus on business logic.

• #spring-boot
• #kotlin
• #convention-plugin
• #microservice
• #spring-cloud
• #graphql
• #dgs
• #mapstruct
• #spotless
• #ci-cd

Provides access to tools configured by project extensions

• #nodejs
• #node.js
• #javascript
• #npm
• #gulp
• #npx

Convention plugin for developing Jenkins plugins with Gradle

• #jenkins
• #convention-plugin
• #jenkins-plugin-development
• #build-automation
• #standardization
• #build-logic
• #version-catalog

Scans Gradle dependencies and Docker base images with Trivy, auto-pins vulnerable versions, and commits fixes locally. Prerequisites: trivy, jq, tar. Install with: apt install -y jq tar curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin v0.72.0 Added tasks: gradleSecurityFix, baseImageSecurityFix (group: security). Both commit fixes to a local branch security/auto-fixes-YYYY-MM-DD. Push the branch and open a PR manually to apply the fixes.

• #security
• #trivy
• #cve
• #vulnerability
• #dependencies
• #docker

This gradle plugin runs the test suit with multiple versions of the Java Virtual Machine

• #testing
• #jvm
• #java
• #kotlin
• #scala

Generate the typed BAML Java SDK from baml_src/ at build time and auto-manage the matching baml-bridge runtime (and its native engine jar) — so `plugins { id("com.boundaryml.baml") version "X" }` is the whole setup.

• #baml
• #llm
• #codegen

Applies org.springframework.boot and wires the MSP Spring Boot BOM for dependency management. Names the bootJar after the root project and registers copyOtelJavaagent to copy the OpenTelemetry Java agent into build/libs at assemble time. Adds spring-boot-devtools (developmentOnly), micrometer-registry-prometheus (runtimeOnly), msp-spring-boot-application (implementation), and msp-spring-test-starter (testImplementation). Rewrites application.yml at processResources time with build metadata (context name, version, CI environment). When com.stano.docker is also applied, auto-configures the Docker image name, build args, and wires bootWar output as the Docker build context.

• #convention
• #spring-boot
• #java

Generic npm/Node build lifecycle support, usable on any npm project (standalone SPA, library, or embedded frontend) regardless of whether a Java plugin is applied. Registers npmVersion, npmInstall, npmClean (wired into clean), npmRunBuild, and npmTest tasks. Optionally builds via nvm (Node Version Manager) instead of a system-installed npm. When org.sonarqube is already applied (directly or on a parent project), configures sonar.sources for the JS source tree.

• #convention
• #npm
• #node
• #frontend