> > Nowhere in that was the sources jar mentioned - yet you seemed to have > jumped directly to a solution and then said can’t be done. > > No, I discussed the two paths from the POM: -sources and <scm/>
My mistake, sorry. > > There is a critical need for this inside businesses as well as Debian (how > > do > we know that "org.foobar:baz:1.2.3:jar" is MIT as it claims and doesn’t > contain some GPL Code. > > Which is a fine reason to contribute it Maven 4 where the POM could contain > the necessary metadata to enable it. This shouldn't prohibit something using what exists now. One commercial company has done something for some subset of artifacts - which may have been entirely human process/mixed or automated. --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org