ESAPI 2.2.3.0 is official. It is in Maven Central and everything on GitHub and the release there should be up-to-date (although some people are still telling me that they are not seeing it when they search for it in Maven).
For this release because of some changes made by AntiSamy starting in their 1.6.0 release, it is VERY IMPORTANT that you at least read the first part of the 2.2.3.0 release notes at:
because some of those changes likely may impact your use of ESAPI 2.2.3.0. Don't read it at your own risk.
--