MCB Missing in Maven Central

[langedb]

Seems that the MCB is no longer in maven central (uchicago/mcb-duo#5) we need to get this pushed back up there to assist module developers.

[dhwalker]

Paul?

David

On 11/14/2014 10:29 AM, David Langenberg wrote:

Seems that the MCB is no longer in maven central (uchicago/mcb-duo#5
uchicago/mcb-duo#5) we need to get this
pushed back up there to assist module developers.

—
Reply to this email directly or view it on GitHub
#16.

[paulhethmon]

I've never put the MCB in Maven Central. I suppose I could figure out how to upload it and do that, but what about security of the build? That's a big drawback to Maven Central, anyone can upload anything.

[langedb]

I wouldn't sweat it all that much. Things in central are PGP-signed and also HMAC'd so you can detect artifact tampering. As for whomever putting whatever up, when I wanted permission to upload things for the Grouper project, I had to get a current Grouper developer with push rights to vouch for me. Only then did the central admins give me the go-ahead.

You're not forced to use central as a developer. If folks don't want to use it, they can download the code/artifacts themselves, build it all, and whatever else. However, for the rest of us, it's extremely convenient.

[skoranda]

+1