squakez edited a comment on issue #240:
URL: https://github.com/apache/camel-k/issues/240#issuecomment-903840605


   I am not sure if this is still relevant to these days, as the feature was 
requested already long time ago. If it's still the case, maybe we can think to 
upload the dependency on the operator local m2 via 
[`[install-file]`]((https://maven.apache.org/guides/mini/guide-3rd-party-jars-local.html))
 just the first time we use it. Maybe we can generate some SHA in order to 
guarantee uniqueness starting from the URI that defines the dependency. The 
only concern I have is if it makes sense for the operator to host some 
dependency that could be malicious (altough the same could apply for any mvn 
dependency I guess).


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscr...@camel.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


Reply via email to