There is a very informative thread happening recently on the "legal-discuss" list.
Here are some that i find useful: Re: Clarification on the release requirements http://mail-archives.apache.org/mod_mbox/www-legal-discuss/200904.mbox/%3cea990bce-46d0-4d06-9067-30203292e...@gbiv.com%3e http://mail-archives.apache.org/mod_mbox/www-legal-discuss/200904.mbox/%3cb30186f5-e514-4b1d-958c-a064433fa...@gbiv.com%3e Those two set out some principles. The rest of the thread has other useful stuff. If someone at Forrest sees any issues with our own release process then please help to fix it. http://forrest.apache.org/procedures/release/How_to_release.html I reckon that we are in pretty good shape: We vote on an actual source archive. We tag svn to relate to what we release and we declare the SVN revision number. Our release procedure suggests that when voting, we quote the md5sum to ensure that we are all using the correct release candidate package. We distribute our core product from a.o/dist and so onto the main mirror system. Those are only some of the main aspects, so please review that thread and so help to ensure that we cover the lot. We do need to improve our plugin system at some stage. -David
