Hi Lars, Am Dienstag, den 31.10.2017, 13:01 +0100 schrieb Lars Bruun-Hansen: > Well, comparing a signed jar with an unsigned jar for equality will take > quite a bit of time. Do you have a quick way of doing that? (let me know > :-)) > That's why I'm leaning towards not spending time on it at this stage even > if the (presumably) equivalent signed jar can be found in Maven Central.
A tool to make this easier is diffoscope. You can use the website https://try.diffoscope.org that offers that as hosted service. As a sample from the commons-logging review: This is the result for the two JARs: https://try.diffoscope.org/zhusppsybqgu.html Greetings Matthias
