[
https://issues.apache.org/jira/browse/COMDEV-294?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17688189#comment-17688189
]
Sebb commented on COMDEV-294:
-----------------------------
AFAIK there are still projects which release obsolete hashes.
Whether it is worth the effort, I don't know.
> scandist.py: detect and report deprecated hash types
> ----------------------------------------------------
>
> Key: COMDEV-294
> URL: https://issues.apache.org/jira/browse/COMDEV-294
> Project: Community Development
> Issue Type: New Feature
> Components: Reporter Tool
> Reporter: Sebb
> Priority: Major
>
> scandist.py could be enhanced to detect deprecated hash types (.md5/.sha1)
> and send an email to the committer linking to the policy.
> For the earliest warning, it should be done for dist/dev.
> However some projects may commit directly to dist/release, so it might be
> necessary to check dist/release as well.
> Generally, all the files for a release artifact are added as part of the same
> commit, so it should be possible to detect where a project is providing
> deprecated hashes in addition (e.g. for historic purposes). To avoid too many
> messages, such commits could be ignored for the present.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@community.apache.org
For additional commands, e-mail: dev-h...@community.apache.org
