Thanks David. Yes, I'm proposing to discuss whether it should move to the main Solr repo. In the current state, solr-sandbox seems dedicated to incubating modules. Actually, my main point is to say the encryption module should exit the incubation state, whether it stays in the sandbox or not. But if it stays there, there should be a clear way to differentiate "incubating" or "ready" modules for external users. - If users want to have encryption for Solr (provided they have the right use-case, as described in the doc), they should have confidence they can use it. - To my knowledge, there is no section in the Solr doc that describes the modules in solr-sandbox. - Maybe a new module available should be announced in dev and user list. But it should wait for some feedback first I think.
Technically, the sandbox is separate from the main repo, so many updates need to wait for the next Solr release: development is longer. And you are right, there is no test infra nor release process. I don't think sandbox was intended originally to host ready modules with a release process.