There's a plugin for checking it in maven ( http://www.simplify4u.org/pgpverify-... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		lmm on March 23, 2016 \| parent \| context \| favorite \| on: I've Just Liberated My Modules There's a plugin for checking it in maven ( http://www.simplify4u.org/pgpverify-maven-plugin/plugin-info... ) that allows pinning the keys. Ranges are rare but I'm not sure why - maven actually has very good support for them. I guess it's just that they're not the default?

oblio on March 23, 2016 [–]

Version ranges can create inconsistent builds. That's why they're not default and that's why they're not really recommended.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact