Stamatis, Thank you for the reference. Cassandra case is vastly different: they included all the third-party dependencies into the source package.
However, in the thread you mention [1] there's a link that makes "build tools" special: https://apache.org/legal/resolved.html#build-tools That page explicitly permits the inclusion of the build tools if they are used for build purposes. The removal of gradle-wrapper.jar from the source release would reduce security, and it would lower the release vote count as the number of steps to build and verify the code increases. [1]: https://lists.apache.org/thread.html/r1d7330da3c90eb4f2bb8555249572d85615c0f866b45ce04a30c00f2%40%3Cdev.cassandra.apache.org%3E Vladimir
