OpenRewrite Pulls Its Recipes Off Maven Central for a Gated 'Code Genome Project'

Recipes Are Moving from Maven Central to the Code Genome Project

OpenRewrite's modules now ship through the Code Genome Project instead of Maven Central, and every download requires authentication. Builds must add the new repository plus credentials, while keeping Maven Central configured because transitive dependencies still resolve there. A bill of materials keeps versions aligned, and the Gradle plugin has also moved off the Gradle Plugin Portal. Some modules, including rewrite-java, stay Apache-licensed, but others like rewrite-python and rewrite-spring now carry the Moderne Source Available License and are served only to Moderne customers.

Every download from the Code Genome Project requires authentication.
  1. matharmin

    The recent monetization strategy for Maven Central has been bizarre.

    First it seemed like they want to encourage reducing usage (release sizes and file counts), which is fair. It would still be better focus on improving the default tooling to not producuce 10x checksum files with each artifact, and 6MB+ javadoc bundles that no-one reads, but that's a little beside the point.

    Then they started requiring paid plans for _all_ publishers that are not purely community projects. Doesn't matter how open it is, if it's backed by a commercial company, they require a paid plan.

    Now, in principle I don't mind paying for usage. But they promised self-serve signups before the limits are applied, which didn't happen - still no self-serve plans available. And the "contact us" pricing is too a large extent based on _popularity_ of the package. And not in a quantifiable way like "x GB downloaded", but rather "within the top 2% of usage" (by whatever hidden metric).

    So if they lose half their publishers because they don't want to pay, it means I'll automatically be in a higher bracket next year, even if nothing changed on my side?

    And the pricing ends up in a couple thousand $ per year, for something that would have been single-digit dollars when self-hosting on S3. When their main value add over that is that Maven Central is automatically present in user config.

  2. javahippie

    The project will publish the artifacts in a private repository now, you need to register in order to get an access token

More from this day

2026-10-17