When I run mvn install, the compiled artifacts lands in my local repository, the same as this where remote artifacts are installed. Sometimes it is the problem, because you are mixing public jars, which have zero security value (they are already public) with those with highest security value (those you create). Somewhere between goes artifacts downloaded from non-public repos. This remix is hard to manage from security point of view.
The most problematic is the need to give full repository to the new developer (yes, of course, he can run maven and wait the whole day for all plugins etc. to download, but this is the loss of time). It is not easy to remove everything that he should not have access to.
I’ve tried to find in maven documentation a switch for choosing the location where install is made, but this documentation is quite hard to search throug, so the fact I’ve found nothing doesn’t make me believe no such options exists or was not tried to be created. So I’m querying the community for such solution.
The best recommendation i can give is to use a repository manager like Archiva, Artifactory or Nexus (alphabetical order). Furthermore it would not make sense to install files into a different location, cause you will need to change for builds between several local repositories which will destroy the idea of the local repository.