While reading an article (1) (2) on openjfx mailing list, I notice they are starting to implement dependency verification oat build time. They also provide a few additional links (3) and I found another on the value of it (4).
Does Netbeans plan to do something like this? (1) https://mail.openjdk.java.net/pipermail/openjfx-dev/2021-May/030138.html (2) https://mail.openjdk.java.net/pipermail/openjfx-dev/2021-May/030142.html (3) https://wwws.nightwatchcybersecurity.com/2021/04/25/supply-chain-attacks-via-github-com-releases/ (4) “Dependency verification: checksum vs PGP” by Vladimir Sitnikov https://link.medium.com/sor9gXcZhgb Eric -- Eric Bresie ebre...@gmail.com
