On Jun 25, 2012, at 7:36 AM, Joe Stein wrote: > I looked into the Maven Repositories (read through our existing JIRA on it > which seem to be a Sonays issues) > > Any reason to not use Apache's Maven Repo? > http://www.apache.org/dev/publishing-maven-artifacts.html ? I will open a > infrastructure ticket on this later today and see about getting this > through the next set of flaming rings.
As I mentioned in the other email, I think that the artifacts needed to be voted upon along w/ the source. That's what's usually done. My understanding is that there would be a record that jars with specific signatures and hashes were vetted and voted upon. Regards, Alan
