michael-o commented on pull request #645: URL: https://github.com/apache/maven/pull/645#issuecomment-1004273279
> Metadata is only partially handled inside Maven (core), mostly it is now handled transparently in [Maven Resolver](https://github.com/apache/maven-resolver/blob/master/maven-resolver-api/src/main/java/org/eclipse/aether/metadata/Metadata.java), so probably the validator should be part of Maven Resolver and only for some places where Maven directly leverages metadata it should be reused inside Maven directly. WDYT? > > Update: As the validation is Maven repository specific it needs to be called from maven-resolver-provider which is in fact part of the Maven main reactor. I added validation calls in all metadata reads from all Maven modules except the legacy "maven-compat". @cstamas What is your opinion on the package of this new solution? I don't have one yet. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
