3 ms·
It is not the fault of Sonatype. We should not trust Central right away. If I worry about malicious artifacts from Central, I must host my own repository and ma
by einrealist 12y ago
It is not the fault of Sonatype. We should not trust Central right away. If I worry about malicious artifacts from Central, I must host my own repository and manage artifacts myself. And that way, I can just map other repositories I trust more.
- lmm 12y agoTrusting Central > Trusting everyone on the network path between you and central.