...
Add items for discussion here
Server - any other issues?
Maven Central : get to consensus on actionable plan (Tom)
Do we care to know/log who uses/downloads our artifacts ? no
only way we can really know is to host ourselves and not on Central
Plan is to migrate public repos from hosting with Nexus to Apache
To be more secure and hopefully reduce load (gotta try to find out)
Nexus : https://build.shibboleth.net/nexus/content/groups/public/
Apache : https://build.shibboleth.net/maven
Need Nexus to manage snapshot metadata (although we might be able to migrate away)
Do we want to continue to host a public snapshots repository ? yes
no way to control client lookups = lots of 404s
Do we want to continue to host a public (or private) cache of Central ? no
(automatically proxied by Nexus, we could validate sigs using Rod’s tool)
...