Hi,

On Thu, Nov 2, 2017 at 9:39 AM, Lars Bruun-Hansen
<[email protected]> wrote:
> ....it seems that for our release process to be
> approved, we must limit the location from where we fetch 3rd party libs to
> the following...

I don't think that's a hard requirement, but grabbing binaries from
non-standard places is not a good thing in general and might raise
questions from release reviewers.

However, IIUC the NetBeans build strongly checks the digests of all
binaries that it uses, which makes it less of a problem.

Downloading binaries from locations which have an uncertain future
(like hg.netbeans.org/binaries IIUC) means people might be unable to
build NetBeans in the future, and that's not good, just from a
practical and sustainability standpoint - so might be frowned upon as
well, but less so for a first incubating release.

-Bertrand

Reply via email to