Hi,

+1 (binding)

I checked
name, signature, LICENSE and NOTICE files


Best regards
Alin J



On Tue, 26 May 2026, 03:38 Justin Mclean, <[email protected]> wrote:

> Hi,
>
> +1 (binding)
>
> I checked:
> - incubating in name
> - signature and hashes are fine
> - LICENSE and NOTICE are correct
> - no unexpected binary files
> - files have ASF headers
>
>
> However, please review your download page to make sure it complies with
> ASF policy.
>
> On your download page (fesod.apache.org/docs/download/) I see:
>  - No artifact links using closer.lua. The download page has 48 links,
> checksum and signature links present, but zero artifact download links
> using the required closer.lua mirror redirect. This is a policy violation.
> Artifact links must use the mirror system, not direct links.
>  - Checksum and signature links don't all use
> https://downloads.apache.org/. Some are pointing elsewhere, which is
> non-compliant. Checksums and sigs must be served from downloads.apache.org
> .
>
> GitHub pre-donation releases should be clearly marked as non-ASF releases.
>
> Maven Central has no Incubator disclaimer in POM descriptions.
>
> Kind Regards,
> Justin
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
>

Reply via email to