Your comment about reproducible builds is VERY important. Lots of people don't think of that I we need to help them not doing bad things...
/Anders On Thu, Feb 4, 2010 at 10:37, Karl Heinz Marbaise <k...@soebes.de> wrote: > > Hi, > > > Anders Hammar wrote: > > > > Maybe have a look how the assembly plugin works with descriptors? Having > > pre-defined configs that can be referenced by id/name could be handy. > Good hint... > > > Anders Hammar wrote: > > However, I'm not sure if using a URL to download the descriptor/config is > > a > > good idea. I'm thinking that that could be misused by linking to configs > > outside your environment that change or can't sometimes be > downloaded.Yeah > > that's that thought about as well...This means someone could define URL > > outside of the build environment > and that could cause a none reproducible build. Which is bad... > > > Anders Hammar wrote: > > > > I would start simple and then add new possibilities. What would be very > > nice, is if you implement this in modules so that the functionality can > be > > used by other types of plugins as well, such as a Nexus plugin to verify > > this centrally in a repo manager. This is not a big problem to separate > > the code from the plugin functionality... > > > Anders Hammar wrote: > > But I guess you could re-factor that later on. > This is of course possible as well... > > Many thanks for you hints and comments. > > Kind Regards > Karl Heinz Marbaise > -- > View this message in context: > http://old.nabble.com/RFC%3A-Maven-License-Verifier-Plugin-tp27445231p27449954.html > Sent from the Maven - Users mailing list archive at Nabble.com. > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@maven.apache.org > For additional commands, e-mail: users-h...@maven.apache.org > >
