On Fri Grant Ingersoll <[email protected]> wrote: > Why was gpg-plugin just added to the core pom and not higher up? > All the artifacts produced need to be signed.
The gpg-plugin is part of the apache-root-pom. See also: http://svn.apache.org/viewvc/maven/pom/trunk/asf/pom.xml?revision=766951&view=markup http://maven.apache.org/developers/release/releasing.html If all our artifacts inherit from that, they should all get signed, right? Isabel
