How does maven 2 implement reproducibility?
• Add the exact versions of plugins into your pluginDepenencies (make use of the release plugin) • Make use of ibiblio for your libraries. This should always be the case for jars. (The group is working on stabilising metadata and techniques for locking it down even if it changes. An internal repository mirror that doesn’t fetch updates (only new) is recommended for true reproducibility.