Hi, Julian Hyde <jh...@apache.org> wrote: > ...Part of the reason that binaries are not part of the release is that > it's only practical to vote on source code. What you have done here, > generating and signing binaries from the source code, is about the > best we can do...
I think Reproducible Builds also help make binaries safer, see links below. -Bertrand - https://reproducible-builds.org - https://github.com/jvm-repo-rebuild/reproducible-central - https://zlika.github.io/reproducible-build-maven-plugin/index.html --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@baremaps.apache.org For additional commands, e-mail: dev-h...@baremaps.apache.org