+1
Checking needed:
+ does everything work on Linux?
Yes.
+ does everything work on MS Windows?
+ does everything work on OS X?
+ is the GPG signature fine?
Yes
+ are the checksums correct?
Yes
+ is there a source archive?
Yes
+ can the source archive really be built?
Yes
+ is there a correct LICENSE and NOTICE file in each artifact
(both source and binary artifacts)?
Yes
+ does the NOTICE file contain all necessary attributions?
Yes
[I see it depends on Google Guava but see no NOTICE requirements for that]
+ have any licenses of dependencies changed due to upgrades?
if so have LICENSE and NOTICE been upgraded appropriately?
n/a
+ does the tag in the SCM contain reproducible sources?
Yes
Dave
