Le 03/08/2011 08:40, Phil Steitz a écrit :
On 8/2/11 11:30 PM, Jochen Wiedmann wrote:
On Wed, Aug 3, 2011 at 8:28 AM, Phil Steitz<phil.ste...@gmail.com>  wrote:

Nothing, other than that is exactly what I do and I know exactly
what is going on.  I don't see any real saving, that's all and I see
no need to bring in proprietary gui-based software into the mix or
to wget stuff from remote hosts.  Nobody else seems to care about
this, but you actually should perform a step that I don't - which is
to verify the hashes after you move the stuff to dist/
Why should I? They have been built by Maven or Nexus automatically?

When you transfer files on the Internet, they can get corrupted in
transit.  This is why we *have* hashes on the files.   When you put
the files on p.a.o and we VOTE on the bits there, you can just move
them to /dist without worrying about integrity.

And I seriously hope nothing is being "built by nexus" :)

I am also worried about a closed tool like Nexus being used to publish Apache stuff.

Luc


Phil




---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org

Reply via email to