Maven Central Search API boundary

Evidence-backed facts

1. Sonatype Central Repository documents published Maven coordinates, versions, packaging, classifiers, timestamps, checksums, and search results. informative
2. Public search is separate from authenticated publishing and namespace verification; access does not grant component ownership, release, signing, or Sonatype authority. informative
3. Clients must bind query syntax, group, artifact, version, class, checksum, rows, start, core, and repository endpoint. informative
4. Repository coordinates and checksums prove indexed artifacts, not publisher identity beyond repository controls, code safety, license compatibility, maintenance, or suitability. informative

Primary sources