+1 (binding)

+ sigs look good
+ LICENSE, NOTICE, DISCLAIMER look good
+ licenses in source and xml files look good.
+ tests compile and pass, mvn package compiles

-Jakob

On 13 June 2016 at 12:13, Julian Hyde <jh...@apache.org> wrote:
>
>> On Jun 13, 2016, at 12:08 PM, Marvin Humphrey <mar...@rectangular.com> wrote:
>>
>> On Mon, Jun 13, 2016 at 11:37 AM, Julian Hyde <jh...@apache.org> wrote:
>>
>>> But I imported
>>> https://github.com/apache/incubator-beam/blob/v0.1.0-incubating-RC3/KEYS
>>> <https://github.com/apache/incubator-beam/blob/v0.1.0-incubating-RC3/KEYS>
>>> easily enough.
>>
>> Bundling PGP keys inside a package is worse than worthless -- an attacker can
>> just bundle spoofed keys with a bogus distort!
>
> My mistake — thanks for the correction!
>
> Julian
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
> For additional commands, e-mail: general-h...@incubator.apache.org
>

---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Reply via email to