PRIMARYManual
Apache Maven official lifecycle source
2014-02-18 | End of Life
Publisher identity used by product-specific official-source collectors.
Open official vendor source
← Search results
REVIEWED ORIGINAL-SOURCE CLAIMOFFICIAL VENDOR SOURCEREVIEWED 13 SEP 2026
Apache · EDITORIAL PRIMARY-SOURCE REVIEW
Apache Maven 1.x
Apache Maven 1.x is tracked by BlackTree as an end-user software application. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.
This claim was manually scoped and reviewed against the linked original publisher statement. It applies only to the named release and support phase. Confirm edition, device and contract applicability before acting.
Claim scope: Apache Maven core 1.x branch only. The date is the EOL entry in Maven's publisher release history, not the last version release date or the support end for Maven plugins.
Reviewed 13 Sep 2026.
Product overview
Apache Maven 1.x is tracked by BlackTree as an end-user software application. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.
Main capabilities
- User-facing application functions
- Local or managed application deployment
- Vendor-maintained feature and security updates
Typical use
Used by individuals or organizations for the product-specific tasks described by its publisher.
Deployment
Installed on supported endpoints or supplied through a vendor-managed service, depending on the edition.
This category-level context is generated from the registered product identity. Confirm exact product capabilities on the publisher's page .
Collected lifecycle data
| Product | Apache Maven 1.x |
|---|---|
| Release | 1.x |
| End of End of life | 18 February 2014 |
| Date precision | Day |
Known exploited vulnerabilities
Catalogue updated 31 Oct 2026These are product-family matches in the CISA Known Exploited Vulnerabilities catalogue. Confirm the affected product version in the vendor advisory.
No CISA known-exploited entries currently match this mapped product family.
This does not mean the product has no vulnerabilities.
Package vulnerability advisories
OSV advisories are matched through the registered package URL. A package-family match does not prove that the installed release is affected. Check the affected and fixed versions before remediation.
No package advisories have been linked for this product identity.
This is not evidence that the product has no vulnerabilities.