Craig McClanahan wrote:
> Noel J. Bergman wrote:
> > Roy T. Fielding wrote:
> > > Snapshots are not releases. Releases require three binding +1s,
> > > a majority of positive votes, and a verifiable signature.
> > >
> > > I think it is absurd for any project to be distributing snapshots
> > > to end-users since it bypasses our mechanism of oversight.
> > And this is true for all projects, not just Incubator projects.
> So I guess we should banish the concept of nightly builds of any
> Apache project? :-)
Well, as you know, but to clarify for others, nightly builds are not
releases, not labeled as such, not distributed from our mirrors system, and
are otherwise available from a download area that is delineated from release
areas. Yes, an end user can download them, but they are aware of what they
are getting.
> I agree with your subsequent comment about putting things
> into repositories that get downloaded automatically (without
> the user necessarily understanding the provenance of what they are
> downloading) is crossing the line.
Right. As was pointed out, there is a separate repository with the nightly
and snapshot builds where these artifacts can be placed, so it is possible,
but it doesn't get conflated with release artifacts.
--- Noel
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
