With a fake POM and shelling out (and uses the go-offline goal, it could be argued that copy-dependencies is probably what you want). The proper way would be to use Aether.