update readme

Author: yawkat

README.md

@@ -1,7 +1,16 @@
 # LZ4 Java
 
+*Community-maintained fork of https://github.com/lz4/lz4-java to patch CVE‐2025‐12183. Maven coordinates:*
+
+```xml
+<dependency>
+    <groupId>at.yawk.lz4</groupId>
+    <artifactId>lz4-java</artifactId>
+</dependency>
+```
+
 LZ4 compression for Java, based on Yann Collet's work available at
-http://code.google.com/p/lz4/.
+https://github.com/lz4/lz4.
 
 This library provides access to two compression methods that both generate a
 valid LZ4 stream:
@@ -155,40 +164,8 @@ speed at which they compress/decompress/hash bytes.
 
 # Build
 
-## Requirements
-
- - JDK version 7 or newer,
- - ant version 1.10.2 or newer,
- - ivy.
-
-If ivy is not installed yet, ant can take care of it for you, just run
-`ant ivy-bootstrap`. The library will be installed under ${user.home}/.ant/lib.
-
-You might hit an error like the following when the ivy in ${user.home}/.ant/lib is old. You can delete it and then run `ant ivy-bootstrap` again to install the latest version.
-```
-[ivy:resolve] 		::::::::::::::::::::::::::::::::::::::::::::::
-[ivy:resolve] 		::          UNRESOLVED DEPENDENCIES         ::
-[ivy:resolve] 		::::::::::::::::::::::::::::::::::::::::::::::
-```
-
-## Instructions
-
-For lz4-java 1.5.0 or newer, first run `git submodule init` and then `git submodule update`
-to initialize the `lz4` submodule in `src/lz4`.
-
-Then run `ant`. It will:
+Make sure you have a Java 7 installation in your [Maven toolchains.xml](https://maven.apache.org/guides/mini/guide-using-toolchains.html). You may also need a C compiler.
 
- - generate some Java source files in `build/java` from the templates that are
-   located under `src/build`,
- - compile the lz4 and xxhash libraries and their JNI (Java Native Interface)
-   bindings,
- - compile Java sources in `src/java` (normal sources), `src/java-unsafe`
-   (sources that make use of `sun.misc.Unsafe`) and `build/java`
-   (auto-generated sources) to `build/classes`, `build/unsafe-classes` and
-   `build/generated-classes`,
- - generate a JAR file called lz4-${version}.jar under the `dist` directory.
+Then, run `./mvnw verify`.
 
-The JAR file that is generated contains Java class files, the native library
-and the JNI bindings. If you add this JAR to your classpath, the native library
-will be copied to a temporary directory and dynamically linked to your Java
-application.
+Building a full artifact with native libraries for all supported platforms is more complex. We do this through github actions.