sebtiem opened a new issue, #216: URL: https://github.com/apache/maven-artifact-plugin/issues/216
### New feature, improvement proposal As stated here https://github.com/apache/maven-artifact-plugin/issues/93 some years ago, it might be a bad idea to deploy a buildinfo file. SBOMs seem to be a much more suitable and standardized way to store information about file hashes and contents. In addition, the buldinfo format has been deprecated without any replacement: See https://reproducible-builds.org/docs/jvm in section .buildinfo. The buildinfo format may still produce some value during development and build comparison but its role as **not standardized** document in a maven repo is questionable regarding current standards like SBOM. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
