Hi, The PPMC must not distribute unreleased code to the general public, this includes release candidates. From the ASF release policy: "Projects MUST direct outsiders towards official releases rather than raw source repositories, nightly builds, snapshots, release candidates, or any other similar packages."
This include making them available on GitHub [1] and Docker [2]. Please remove these releases. The main issue here is that there is no indication that these are not official releases and the general public could download them thinking that they were. Thanks, Justin 1. https://github.com/apache/incubator-sdap-nexus/releases 2. https://hub.docker.com/u/sdap
