Sorry for taking so long to review this. Building from source using "mvn install" gave me problems at first. I tried java 1.7 / mvn 3.3.3 and then downgraded to java 1.6 / mvn 3.0.3, but neither worked.
Both times it died in [INFO] Cayenne Java 1.5 Unpublished ...................... FAILURE [1:26.758s] With 1.6 and "mvn" I made it to [INFO] Cayenne Documentation ............................. FAILURE [39.250s] I finally was able to get a clean build using 1.7 and mvn 3.3.3 with "mvn" followed by "mvn install" I also saw the 40 iml files reported by rat, but these are also not a blocker for me. I'm concerned about the build issues, but I suppose it must have been something specific to my environment. - signatures and checksums match - source builds (With problems noted above) - apache rat passes except for 40 .iml files +1 Below are the linux commands I used to verify the release of the cayenne-3.1.1 files: ============================================= wget https://dist.apache.org/repos/dist/dev/cayenne/cayenne-parent-3.1.1//cayenne-3.1.1-macosx.dmg wget https://dist.apache.org/repos/dist/dev/cayenne/cayenne-parent-3.1.1//cayenne-3.1.1-macosx.dmg.asc wget https://dist.apache.org/repos/dist/dev/cayenne/cayenne-parent-3.1.1//cayenne-3.1.1-macosx.dmg.md5 wget https://dist.apache.org/repos/dist/dev/cayenne/cayenne-parent-3.1.1//cayenne-3.1.1-src.tar.gz wget https://dist.apache.org/repos/dist/dev/cayenne/cayenne-parent-3.1.1//cayenne-3.1.1-src.tar.gz.asc wget https://dist.apache.org/repos/dist/dev/cayenne/cayenne-parent-3.1.1//cayenne-3.1.1-src.tar.gz.md5 wget https://dist.apache.org/repos/dist/dev/cayenne/cayenne-parent-3.1.1//cayenne-3.1.1-win.zip wget https://dist.apache.org/repos/dist/dev/cayenne/cayenne-parent-3.1.1//cayenne-3.1.1-win.zip.asc wget https://dist.apache.org/repos/dist/dev/cayenne/cayenne-parent-3.1.1//cayenne-3.1.1-win.zip.md5 wget https://dist.apache.org/repos/dist/dev/cayenne/cayenne-parent-3.1.1//cayenne-3.1.1.tar.gz wget https://dist.apache.org/repos/dist/dev/cayenne/cayenne-parent-3.1.1//cayenne-3.1.1.tar.gz.asc wget https://dist.apache.org/repos/dist/dev/cayenne/cayenne-parent-3.1.1//cayenne-3.1.1.tar.gz.md5 # check checksums ## made with gpg --print-md MD5 cayenne-X.X.tar.gz cat *.md5 | tr -d ' ' | awk 'BEGIN{OFS=" "; FS=":"} {tmp=$1;$1=$2;$2=tmp;print}' | md5sum -c # check signatures wget http://www.apache.org/dist/cayenne/KEYS gpg --import KEYS find . -name '*.asc' -exec gpg --verify {} \; # verify .tar.gz and -win.zip files are identical -- flawed process due to platform building differences mkdir src cd src tar xvf ../cayenne-3.1.1.tar.gz mv cayenne-3.1.1/ cayenne-3.1.1-tar-gz unzip ../cayenne-3.1.1-win.zip # should be no output # but windows and tar package are built with different java versions. ## differences in jars, pdfs, html resources, css, html, package-info between tar.gz and zip(win) diff -rq cayenne-3.1.1* | grep -v "jar differ" | grep -v "html differ" | grep -v "pdf differ" | grep -v ".css differ" # should be "are identical" output diff -srq cayenne-3.1.1* | grep -v "jar differ" | grep -v "html differ" | grep -v "pdf differ" | grep -v ".css differ" | grep -v "are identical" # unpack source tar xvzf ../cayenne-3.1.1-src.tar.gz # build source cd cayenne-3.1.1-src mvn install ## mvn apache-rat currently unused for cayenne ./rat.sh ~/java/apache-rat-0.11/apache-rat-0.11.jar