desruisseaux commented on PR #508: URL: https://github.com/apache/maven-jar-plugin/pull/508#issuecomment-5332158647
> If that proves to be true and we can't find a workaround, that's a blocker. Reproducible builds are the more important feature. I disagree that it is the most important feature. I think that they real feature you are asking for is a way to verify the integrity of a JAR (no malicious code). This is **semantic** reproducible builds, and something that we could provide. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
