Hi. Le mar. 28 mars 2023 à 15:53, Dirk-Willem van Gulik <di...@webweaving.org> a écrit : > > [...] > ..... > > Some other examples: 'pkg:apache/commons/io', > > 'pkg:apache/xmlgraphics/batik', 'pkg:apache/airflow/providers-airbyte' > > - looks OK to me? > > Aye - looks OK. And more than that - I would be perfectly willing to let > every PMC manage their own house, their namespace in ways that work with the > community. > > So from a security perspective - we expect you to have a prefix > org.apache.<PMCname> -- and expect the PMC to do things 'down' from there.
Wouldn't it open the "opportunity" to let several get their own wrong wheel? Regards, Gilles > > [...] --------------------------------------------------------------------- To unsubscribe, e-mail: security-discuss-unsubscr...@community.apache.org For additional commands, e-mail: security-discuss-h...@community.apache.org