All, I posted a message to the Cenqua technical support forum (http://www.cenqua.com/forums/thread.jspa?threadID=3318) with the following content:
I recently came across a concerning issue regarding the Atlassian repository used now to house the clover tools and clover maven plugin. This repository contains many artifacts that are duplicated on the central repository but are not authored (that I can tell) by Atlassian. Even more concerning, I have found snapshots of certain artifacts, specifically org.apache.maven.plugins are hosted here. This can cause lots of grief to users of the Atlassian tools by introducing incorrect artifacts into their build. I personally observed this today and spent some time tracing it back to this repository. The repository url is: http://repository.atlassian.com/maven2/org/ Duplicated artifacts after a quick compare of Atlassian and http://repo1.maven.org/maven2 Org/tmatesoft/svnkit Org/openxri/ Org/openid4java Org/jfree (jfree on repo1) Org/codehaus/cargo ****snapshots Org/codehaus/xfire Org/apache/* ****Snapshots of plugins among others The best practice is not to mix snapshots and releases together in the same repository. Even though maven can be told which repos to use for snapshots and releases, the metadata from a merged repository such as Atlassian can contain information about snapshots that causes build problems. As a service to your users, my strong suggestion is to remove all artifacts that already exist on central, most importantly org/apache and org/codehaus. I would also suggest that snapshots of all artifacts be removed from this repo and placed in a separate snapshot repository. Thanks, Brian Fox Apache Maven PMC Member
