www-repository mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Dain Sundstrom <d...@iq80.com>
Subject Re: [Plan of action] Setting up an official maven repository for the ASF
Date Wed, 07 Jun 2006 18:31:00 GMT
+1

Great work Henri!

-dain

On Jun 6, 2006, at 11:45 PM, Henri Yandell wrote:

> Nothing from Brett yet, so braindump from me.
>
> Two classes of repository - m1 and m2. We should focus on short-term
> goals for the m1 one and long-term for the m2 one.
>
> Some goals:
>
> * Development ease. It should not take forever to get a dependency  
> deployed.
> * Authentic. PGP .asc files for each release.
> * Official. Projects should know their code is being placed in the  
> repository.
> * Oversight. People shouldn't be deploying jars randomly.
> * Complete. Javadoc, Source and Binary jars.
> * Stable. Files should not be easy to change.
>
> Multiple repositories are needed:
>
> * ASF Release Repository.
> * ASF Snapshot Repository. Deployed to from CI.
> * ASF Development Repository. May contain 3rd party jars and manual  
> snapshots.
>
> Some random ideas:
>
> * Monitoring. Have a script that mails this list when something is
> added to the release or development repositories. Much like a cvs
> commit in another project.
>
> * Tighten things up in a staggered way. Every couple of months we can
> enforce something new. ie) All non-PGP signed jars will be removed by
> X.
>
> * Pull the Maven repositories out of the mirroring system. It's
> unnecessary. With the rsync being down atm, there's not a lot of
> reason to avoid it. In fact, rm the ones in the maven repos and move
> the ones in archive.apache to repo.apache.org. Need various
> repo.apache.org directory names.
>
> Hen
>
> On 5/29/06, Stefano Mazzocchi <stefano@apache.org> wrote:
>> So, following up on my board@ message, here we should start to  
>> work on a
>> plan of action for setting up an official maven repository for the  
>> ASF
>> that would meet both board's legal concerns and infra's
>> technical/security concerns and general social feasibility concerns.
>>
>> I know Brett has been thinking about this a lot so I'll leave the
>> microphone to him to start.
>>
>> Let's rock.
>>
>> --
>> Stefano.
>>
>>


Mime
View raw message