Open-source lockfile companion for Maven with reproducible builds
Stage
Established
Not given
Founded
Not given
Not given
Based in
Not given
Not given
Pricing model
Freemium
Not given
Pricing
Not given
Free tier: Raeva CLI forever with no account required, including lockfiles, offline export, vulnerability scanning, and SBOMs. Team tier: private Maven registry with immutable releases and organization-wide token management, with flat annual pricing per organization. Enterprise: dedicated deployment
Key features
Daily or weekly rescans of dependencies
Tracks dependency versions and how far behind latest
Identifies end-of-life and dangerous dependencies
Client workspaces for multi-organization management
CSV and CycloneDX export
Trend and burn-down metrics
Slack alerts for dependency issues
Client reports with effort estimates
Lockfile generation with SHA-256 checksums
Offline-ready builds
Vulnerability scanning
SBOM generation
Single native binary with no JVM dependency
Private Maven registry with immutable releases
Works with Maven and Gradle unchanged
Organization-wide token management
Reproducibility reports for CI runs
What makes it different
Flat per repository pricing, never per developer
Read-only access without adding pull requests
Scans across multiple client organizations
Command-line tool for offline reports
Verified against 46 open-source projects including Netty, Spring AI, and Jenkins