HI, > Confirmed IP Clearance from all active committers: > https://lists.apache.org/thread.html/7c8fc7fa0fc677c24504d948d7d71e6cdebdb952c9ca0a2183460726%40%3Cprivate.maven.apache.org%3E > https://lists.apache.org/thread.html/bd38cce5904d805b8526593996fcfec17ba4c8b6d8a18d66261d072c%40%3Cprivate.maven.apache.org%3E > https://lists.apache.org/thread.html/00102361655d35ea939d44e522d9dd1fb4894af20ac418a1ef5973be%40%3Cprivate.maven.apache.org%3E > https://lists.apache.org/thread.html/7459ee80b46bef0c2f4640700a3ee4bad46ae64bb3dad54f8c7896a3%40%3Cprivate.maven.apache.org%3E > https://lists.apache.org/thread.html/0a9e690562ffe25ede5b601600e6b7edd5f1c70a2aaffddabbf5f85f%40%3Cprivate.maven.apache.org%3E > with this we have secured all IP for both repositories.
Github list 35 contributors for [1], and 7 contributors for [2] without an SGA I think you would require ICLAs from all significant contributors, not just current ones. Thanks, Justin 1. https://github.com/takari/maven-wrapper/graphs/contributors 2. https://github.com/takari/takari-maven-plugin
