On Fri, May 26, 2023 at 4:18 AM Kemal Soysal <kemal.soy...@ls-it-solutions.de> wrote: > > Hi Mathias, > > I commented on the pull request. > For me it is crucial to be able to upload additional artifacts to a > coordinate. > It has various reasons. > When you work in an agile mind set, you do not need every artifact in the > very beginning. > You do approach agile and deliver first the most needed part. > In case you have a heterogenous development environment that you want to > provide with a native library > you deliver first your own machines native library…. > And then when needed the other machines will follow…
That's fine, but it in no way implies the new artifacts have to be in the same version. New code --> new version. Each version should have fixed and immutable artifacts. > Another much forgotten usage of this additional artifact attachment is, when > for example a CVE to a coordinate comes up. > At the moment, there is a hard work to maintain the CVEs and related > coordinates. > It would be great to put a CVE where it belongs… to the coordinate itself > I don't understand what you're asking for here. -- Elliotte Rusty Harold elh...@ibiblio.org --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org