Hey all,
Just been reading [1] after it was mentioned in both #scala and #clojure
on irc.freenode.org now, is there anything that can be done to alleviate
some of these issues?
oss.sonatype.org now requires everything to be GPG signed before being
uploaded to central, but I'm not sure about any of the other means of
getting artifacts uploaded.
Are there any plugins out there to verify GPG signings of dependencies?
Something to discuss on the dev-hangout maybe?
[1] https://news.ycombinator.com/item?id=8099713
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org
