www-repository mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jukka Zitting" <jukka.zitt...@gmail.com>
Subject Transparent modification of Maven artifacts?
Date Fri, 27 Oct 2006 10:37:52 GMT

[I assume this is a good place to contact, let me know if there's a better one.]

The jackrabbit-core-1.0.1.pom at Ibiblio differs from the one I
deployed to people.apache.org:

$ IBIBLIO=http://www.ibiblio.org/maven
$ PEOPLE=http://people.apache.org/repo/m1-ibiblio-rsync-repository
$ POM=org.apache.jackrabbit/poms/jackrabbit-core-1.0.1.pom
$ GET $IBIBLIO/$POM | openssl md5
$ GET $PEOPLE/$POM | openssl md5

The difference is apparently explained in

What's the policy for making such changes? At least I wasn't informed
about the modification. In addition, the signature I associated with
the POM is now invalid.

See http://issues.apache.org/jira/browse/JCR-592 for our concerns
about making the change in Jackrabbit trunk and the reason why the
same change is not reflected in the recent Jackrabbit 1.1 release. I'm
currently following up on the license issue.


Jukka Zitting

View raw message