[ 
https://issues.apache.org/jira/browse/COMDEV-294?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17688182#comment-17688182
 ] 

Andrew Musselman commented on COMDEV-294:
-----------------------------------------

Is this still relevant? I remember infra doing a cleanup with projects a while 
back, maybe in 2020?

> scandist.py: detect and report deprecated hash types
> ----------------------------------------------------
>
>                 Key: COMDEV-294
>                 URL: https://issues.apache.org/jira/browse/COMDEV-294
>             Project: Community Development
>          Issue Type: New Feature
>          Components: Reporter Tool
>            Reporter: Sebb
>            Priority: Major
>
> scandist.py could be enhanced to detect deprecated hash types (.md5/.sha1) 
> and send an email to the committer linking to the policy.
> For the earliest warning, it should be done for dist/dev.
> However some projects may commit directly to dist/release, so it might be 
> necessary to  check dist/release as well.
> Generally, all the files for a release artifact are added as part of the same 
> commit, so it should be possible to detect where a project is providing 
> deprecated hashes in addition (e.g. for historic purposes). To avoid too many 
> messages, such commits could be ignored for the present.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@community.apache.org
For additional commands, e-mail: dev-h...@community.apache.org

Reply via email to