Hi,

I just read a members thread about this article: 
https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610

One member mentioned that the Groovy project is using the Gradle's dependency 
verification feature[1] in the Apache Groovy build.

I suggest we do the same, even after the move from JCenter to MavenCentral 
where things should be safer.

What do you think?

[1] https://docs.gradle.org/current/userguide/dependency_verification.html 
<https://docs.gradle.org/current/userguide/dependency_verification.html>

Jacques

Reply via email to