diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..cd06abe
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+SOURCES/plexus-cipher-1.7.tar.gz
diff --git a/.plexus-cipher.metadata b/.plexus-cipher.metadata
new file mode 100644
index 0000000..6eb407c
--- /dev/null
+++ b/.plexus-cipher.metadata
@@ -0,0 +1 @@
+1186264cc97813e2e857b40eaac67dca38ae6892 SOURCES/plexus-cipher-1.7.tar.gz
diff --git a/SPECS/plexus-cipher.spec b/SPECS/plexus-cipher.spec
new file mode 100644
index 0000000..4928f1c
--- /dev/null
+++ b/SPECS/plexus-cipher.spec
@@ -0,0 +1,150 @@
+Name: plexus-cipher
+Version: 1.7
+Release: 14%{?dist}
+Summary: Plexus Cipher: encryption/decryption Component
+License: ASL 2.0
+# project moved to GitHub and it looks like there is no official website anymore
+URL: https://github.com/codehaus-plexus/plexus-cipher
+BuildArch: noarch
+
+# git clone https://github.com/sonatype/plexus-cipher.git
+# cd plexus-cipher/
+# note this is version 1.7 + our patches which were incorporated by upstream maintainer
+# git archive --format tar --prefix=plexus-cipher-1.7/ 0cff29e6b2e | gzip -9 > plexus-cipher-1.7.tar.gz
+Source0: %{name}-%{version}.tar.gz
+
+BuildRequires: maven-local
+BuildRequires: mvn(javax.enterprise:cdi-api)
+BuildRequires: mvn(javax.inject:javax.inject)
+BuildRequires: mvn(junit:junit)
+BuildRequires: mvn(org.sonatype.plugins:sisu-maven-plugin)
+BuildRequires: mvn(org.sonatype.spice:spice-parent:pom:)
+
+%description
+Plexus Cipher: encryption/decryption Component
+
+%package javadoc
+Summary: Javadoc for %{name}
+
+%description javadoc
+API documentation for %{name}.
+
+%prep
+%setup -q
+
+# replace %{version}-SNAPSHOT with %{version}
+%pom_xpath_replace pom:project/pom:version "%{version}"
+
+# fedora moved from sonatype sisu to eclipse sisu. sisu-inject-bean artifact
+# doesn't exist in eclipse sisu. this artifact contains nothing but
+# bundled classes from atinject, cdi-api, aopalliance and maybe others.
+%pom_remove_dep org.sonatype.sisu:sisu-inject-bean
+%pom_add_dep javax.inject:javax.inject:1:provided
+%pom_add_dep javax.enterprise:cdi-api:1.0:provided
+
+%mvn_file : plexus/%{name}
+
+%build
+%mvn_build -f
+
+%install
+%mvn_install
+
+%files -f .mfiles
+%doc LICENSE.txt NOTICE.txt
+
+%files javadoc -f .mfiles-javadoc
+%doc LICENSE.txt NOTICE.txt
+
+%changelog
+* Fri Feb 09 2018 Fedora Release Engineering - 1.7-14
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
+
+* Thu Jul 27 2017 Fedora Release Engineering - 1.7-13
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
+
+* Sat Feb 11 2017 Fedora Release Engineering - 1.7-12
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
+
+* Thu Feb 04 2016 Fedora Release Engineering - 1.7-11
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
+
+* Thu Jun 18 2015 Fedora Release Engineering - 1.7-10
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
+
+* Tue Apr 14 2015 Mikolaj Izdebski - 1.7-9
+- Cleanup package
+
+* Wed Apr 1 2015 Mikolaj Izdebski - 1.7-8
+- Update upstream URL
+
+* Sat Jun 07 2014 Fedora Release Engineering - 1.7-7
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
+
+* Tue Mar 04 2014 Stanislav Ochotnicky - 1.7-6
+- Use Requires: java-headless rebuild (#1067528)
+
+* Thu Nov 14 2013 Mikolaj Izdebski - 1.7-5
+- Migrate from sisu-maven-plugin to sisu-mojos
+
+* Mon Aug 05 2013 Michal Srb - 1.7-4
+- Fix FTBFS (Resolves: #992802)
+- Adapt to current guidelines
+
+* Sun Aug 04 2013 Fedora Release Engineering - 1.7-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
+
+* Wed Mar 13 2013 Michal Srb - 1.7-1
+- Update to upstream version 1.7
+
+* Thu Feb 21 2013 Mikolaj Izdebski - 1.5-15
+- Reemove BR: plexus-container-default
+
+* Fri Feb 08 2013 Michal Srb - 1.5-14
+- Remove unnecessary dependency on plexus-containers (#908586)
+
+* Wed Feb 06 2013 Java SIG - 1.5-13
+- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
+- Replace maven BuildRequires with maven-local
+
+* Wed Jan 02 2013 Michal Srb - 1.5-12
+- Fixed URL (Resolves: #880322)
+
+* Tue Nov 27 2012 Mikolaj Izdebski - 1.5-11
+- Improve randomness of PBECipher
+- Resolves: rhbz#880279
+
+* Mon Nov 26 2012 Mikolaj Izdebski - 1.5-10
+- Remove duplicated NOTICE file
+
+* Mon Nov 26 2012 Stanislav Ochotnicky - 1.5-9
+- Add ASL 2.0 text and install NOTICE file
+
+* Sat Jul 21 2012 Fedora Release Engineering - 1.5-8
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
+
+* Sat Jan 14 2012 Fedora Release Engineering - 1.5-7
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
+
+* Tue Jul 26 2011 Jaromir Capik - 1.5-6
+- Migration from plexus-maven-plugin to plexus-containers-component-metadata
+- Minor spec file changes according to the latest guidelines
+
+* Fri Jun 3 2011 Alexander Kurtakov 1.5-5
+- Do not require maven2.
+- Build with maven (v. 3) by default.
+- drop obsoleted parts of the spec.
+
+* Wed Feb 09 2011 Fedora Release Engineering - 1.5-4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
+
+* Tue Jun 01 2010 Hui Wang - 1.5-3
+- Add NOTICE.text
+- Fix URL
+- Fix direction of install pom
+
+* Sun May 23 2010 Hui Wang - 1.5-2
+- Correct URL
+
+* Tue May 18 2010 Hui Wang - 1.5-1
+- Initial version of the package