desruisseaux commented on issue #11391: URL: https://github.com/apache/maven/issues/11391#issuecomment-3532102492
> How would you find which one corresponds to hash 12ccc61c573aed8a193f9727dc33795eba29d7c5? If the dependency tree contains two versions of `commons-io` (for example), the hash is computed for those two versions from the JAR files cached in the local `.m2` repository. > Maven repository layout is not designed to fetch artifacts by their hash. I know, but we don't need to search by hash. We only need to compute the hash of files in conflict after they have been downloaded. > How would you perform conflict resolution if different libraries require different hash values for commons-io? The hash prevails if this is what the user requested. It would not be the default, only a strategy that users can select if this what they want. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
