Hi, Am Samstag, dem 15.05.2021 um 16:55 -0500 schrieb Eric Bresie: > [Dependency verification] > > Does Netbeans plan to do something like this? >
NetBeans already does something like this: Download is executed: https://github.com/apache/netbeans/blob/1dc4113f2a46656dd852cfedcafd12d52d7e73fa/nbbuild/antsrc/org/netbeans/nbbuild/extlibs/DownloadBinaries.java#L220-L240 The downloaded File is then verified against the provided hash: https://github.com/apache/netbeans/blob/1dc4113f2a46656dd852cfedcafd12d52d7e73fa/nbbuild/antsrc/org/netbeans/nbbuild/extlibs/DownloadBinaries.java#L244-L250 One can argue, that SHA-1 is not a good hash to use anymore, but the machinary is there and there was at least one attempt to add higher algorithms. Greetings Matthias --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org For additional commands, e-mail: dev-h...@netbeans.apache.org For further information about the NetBeans mailing lists, visit: https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
