www-repository mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Henri Yandell" <flame...@gmail.com>
Subject Re: [Plan of action] Setting up an official maven repository for the ASF
Date Wed, 07 Jun 2006 06:45:54 GMT
Nothing from Brett yet, so braindump from me.

Two classes of repository - m1 and m2. We should focus on short-term
goals for the m1 one and long-term for the m2 one.

Some goals:

* Development ease. It should not take forever to get a dependency deployed.
* Authentic. PGP .asc files for each release.
* Official. Projects should know their code is being placed in the repository.
* Oversight. People shouldn't be deploying jars randomly.
* Complete. Javadoc, Source and Binary jars.
* Stable. Files should not be easy to change.

Multiple repositories are needed:

* ASF Release Repository.
* ASF Snapshot Repository. Deployed to from CI.
* ASF Development Repository. May contain 3rd party jars and manual snapshots.

Some random ideas:

* Monitoring. Have a script that mails this list when something is
added to the release or development repositories. Much like a cvs
commit in another project.

* Tighten things up in a staggered way. Every couple of months we can
enforce something new. ie) All non-PGP signed jars will be removed by

* Pull the Maven repositories out of the mirroring system. It's
unnecessary. With the rsync being down atm, there's not a lot of
reason to avoid it. In fact, rm the ones in the maven repos and move
the ones in archive.apache to repo.apache.org. Need various
repo.apache.org directory names.


On 5/29/06, Stefano Mazzocchi <stefano@apache.org> wrote:
> So, following up on my board@ message, here we should start to work on a
> plan of action for setting up an official maven repository for the ASF
> that would meet both board's legal concerns and infra's
> technical/security concerns and general social feasibility concerns.
> I know Brett has been thinking about this a lot so I'll leave the
> microphone to him to start.
> Let's rock.
> --
> Stefano.

View raw message