On 6 Jan 2015 at 19:01:01, Daniel Gruno (humbed...@apache.org) wrote: On 2015-01-06 18:53, Vincent Keunen wrote: > Good idea. > > I would just remove the "only" from "Releases: source code only". > Maybe say "Releases: source code at the minimum" ? It's not a problem > to have some projects also release binaries, is it?
Releasing binaries have, to this point, always been a convenience service provided by individuals, but that may very well change with the new code signing service. I agree that this will need some mulling over. I think you might be misinterpreting the original intention. Since the only official releases *are* source releases the statement “source code only” probably applies to the source code release, meaning that it should not contain any binaries. Since convenience binaries are not official anyway, it might not make that much sense checking them (we could, to make sure that notice and license files are there). Another thing we might want to do is to check if releases are really placed in /dist/ because that is something that I have seen in the past not happening (only releasing to Maven central for example). Greetings, Marcel
