If you absolutely need this JAR, always verify its SHA-1 checksum ( 23b0f8d5c7... – check Maven Central for the exact value) after download.