On Wed, 31 Jul 2024 at 16:59, Matthias Bläsing
<mblaes...@doppel-helix.eu.invalid> wrote:
> Maven central has the nice property, that its owners (Sonatype) pretty
> explicitly said, that they won't remove artifacts and won't change
> existing artifacts. For the review process this makes it less likely,
> that reviewers see one version, while another is make available to the
> users.

Thanks for following up on this Matthias.  I have to say when I looked
at this again recently after some time, I thought we were hosting them
- took a moment to realise the link that shows in the browser is
redirected to Maven Central.  Is this redirect for download counting
purposes?  Does unfortunately make it less clear where files are
served from.

There are strong limitations on what can be distributed from ASF
resources, and under what licenses, so the option to provide direct
upload is not going to come back.  However, I assume the hash checks
in the catalog could guard against file changes?  If so, might be
possible to consider adding limited additional third-party allowed
hosts?  eg. GitHub releases?

Best wishes,

Neil

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists



Reply via email to