3 ms·

Gradle is no different here. Ditto many other build tool.

• krzyk 2y ago
  But maven does not.
  • stefs 2y ago
    you mean because it's xml instead of executable code?
    • krzyk 2y ago
      No, because it was designed that way - declarative. You can have xml with code-like-structures, e.g. Ant
  • oftenwrong 2y ago
    Maven plugins and extensions can execute arbitrary code, so you should still exercise care when running an untrusted maven project.