last year, i developed a scanning utility that audited distributions stored on people.apache.org in order to help projects spot when anything has changed. it's used in the incubator (http://incubator.apache.org/audit/) but it's a little bit of an experiment (i run it every month).
i'm not sure what would be the best plan is for this code going forward it's currently in http://svn.apache.org/repos/asf/incubator/rat/main/trunk/scan/ (but it hasn't turned out to be that related to the core rat function. so, it doesn't seem like the right URL. possibly it could just be moved up.) - robert
