Every release will be posted onto dist.apache.org, like following:
https://dist.apache.org/repos/dist/dev/incubator/griffin/0.2.0-incubating/
We need to do some verification in our own environment before voting.
LICENSE file exists
NOTICE file exists
DISCLAIMER file exists
Signature file looks good
Hash files look good
Source compiled.
No 3rd part exes in source artifact
Check the filelist
- CHANGES.txt
- [project]-source-release.zip
- [project].pom
- Signature file.
- Hash file.
DO NOT provide md5 files.
Download source package and unpack
Download griffin-0.2.0-incubating-source-release.zip from the dist page.
Unpack the zip.
Check the filelist inside
In the directory, check the files exists:
- LICENSE
- NOTICE
- DISCLAIMER