Search Gradle plugins

A plugin that helps you test your plugin against a variety of Gradle versions

• #testing
• #ci
• #appveyor
• #travis-ci

Simplify the use of complex agp api and isolate the differences between different agp versions

• #android gradle plugin
• #knife
• #convention

Adds a Maven-style META-INF/maven/<groupId>/<artifactId>/pom.properties to the main jar, wired by convention from the project's group, name and version so Maven-aware tooling (SBOM generators, classpath inspectors, security scanners) can identify the artifact a jar belongs to. The generated file is deterministic with no timestamp, keeping archives reproducible.

• #maven
• #pom
• #metadata
• #sbom
• #packaging

Scans Gradle dependencies and Docker base images with Trivy, auto-pins vulnerable versions, and commits fixes locally. Prerequisites: trivy, jq, tar. Install with: apt install -y jq tar curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin v0.72.0 Added tasks: gradleSecurityFix, baseImageSecurityFix (group: security). Both commit fixes to a local branch security/auto-fixes-YYYY-MM-DD. Push the branch and open a PR manually to apply the fixes.

• #security
• #trivy
• #cve
• #vulnerability
• #dependencies
• #docker

Applies org.springframework.boot and wires the MSP Spring Boot BOM for dependency management. Names the bootJar after the root project and registers copyOtelJavaagent to copy the OpenTelemetry Java agent into build/libs at assemble time. Adds spring-boot-devtools (developmentOnly), micrometer-registry-prometheus (runtimeOnly), msp-spring-boot-application (implementation), and msp-spring-test-starter (testImplementation). Rewrites application.yml at processResources time with build metadata (context name, version, CI environment). When com.stano.docker is also applied, auto-configures the Docker image name, build args, and wires bootWar output as the Docker build context.

• #convention
• #spring-boot
• #java

Generic npm/Node build lifecycle support, usable on any npm project (standalone SPA, library, or embedded frontend) regardless of whether a Java plugin is applied. Registers npmVersion, npmInstall, npmClean (wired into clean), npmRunBuild, and npmTest tasks. Optionally builds via nvm (Node Version Manager) instead of a system-installed npm. When org.sonarqube is already applied (directly or on a parent project), configures sonar.sources for the JS source tree.

• #convention
• #npm
• #node
• #frontend

Docker Compose file generation and lifecycle management. Registers generateDockerCompose (resolves artifact versions into a docker-compose.yml template), dockerComposeUp, and dockerComposeDown tasks. Configure the template path, output file, and token replacements via the dockerCompose DSL. Template tokens use {{group:name}} syntax and are resolved from the docker configuration or explicit templateToken(key, value) entries.

• #convention
• #docker
• #docker-compose

Automatically patches vulnerable Java dependencies with secure versions from the Root.io registry — no changes to your dependency declarations required.

• #security
• #dependencies
• #vulnerability
• #patching

Registers a curated set of dependency versions for Kotlin JVM and Multiplatform projects.

• #Komune
• #Fixers
• #kotlin
• #mpp
• #jvm
• #js
• #wasm

Provides Minecraft modding APIs for modern versions with minimal drama

• #minecraft
• #mod
• #client
• #server
• #fabric
• #forge
• #neoforge