Maven Central automatically scans Java projects for vulnerabilities

"Starting this week, we will be scanning all staged repositories on OSSRH automatically as you’re publishing things to Central"