kwin commented on pull request #40: URL: https://github.com/apache/maven-apache-parent/pull/40#issuecomment-831703133
I decided against using maven-resolver-impl for calculating SHA-512 for the following reasons: 1. It requires Resolver 1.6+ which only ships with Maven 3.8.1 2. It will calculate SHA-512 for all artifacts instead only the source-release ones which is IMHO too much overhead and not really useful Although the SHA-512 artifact being calculated by the checksum-maven-plugin will get another MD5/SHA1 checksum when being deployed that IMHO doesn't do any harm. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org
