Page History

...

• incubating in name if an incubating project
• CHANGES.txt
• [project]-source-release.zip
• [project].pom
• Signature file.
• Hash files.

DO NOT provide md5 or sha1 files.

Download source package and unpack

...

gpg --verify griffin-0.2.0-incubating-source-release.zip.asc griffin-0.2.0-incubating-source-release.zip
 
// do the same thing to download and verify griffin-0.2.0-incubating.pom with griffin-0.2.0-incubating.pom.asc
gpg --verify griffin-0.2.0-incubating.pom.asc griffin-0.2.0-incubating.pom

Verify hash files

Download griffin-0.2.0-incubating-source-release.zip.sha1 from Download the .sha512 files from the dist page.

on linux:

for f in *.sha1sha512; do echo "$(cat $f) ${f/.sha1/}"; done | sha1sumsha512sum -c

on mac:

for f in *.sha1sha512; do echo "$(cat $f)  ${f/.sha1/}"; done | shasum -a 512 -c

Check the filelist inside

Unzip and change Into the directory, check the files exists:

• LICENSE
• NOTICEDISCLAIMER

Check the licenses

mvn apache-rat:check

...