Most people as they surf the web would get a warning by their browser if they approach a website with an SSL certificate issued by an unnknown authority, or even known as malicious place.
Now, thousands of developers - over 80% of Java related projects using Maven Central - download software components known to have vulnerabilties, sometimes there are even judicial conseqences.
Then, I thought to discuss a plugin for a binary repository coupled with the NVD database to issue a warning HTTP header if a client requests a component with a known vulnerability.
Which HTTP code is to use for that - if a non-opiniated option is anyhow possible? I fail to identify it myself in the list of known codes.
UPD the answer of the server is basically file download, if this happens you see Maven log like "download ok" and if this is not ok, the build would break. So search for a "soft" method to filter out problematic resources.