Hi Simon,

I have taken a look into your suggestions ....I have a couple of thoughts about it ...

First there exists already a rule to avoid repositories (http://maven.apache.org/enforcer/enforcer-rules/requireNoRepositories.html) which can be used and is has an option to allow particular repositories by using a white-list of allowed repository based on the repository id.

like this:

<requireNoRepositories>
  <allowedRepositories>
    <allowedRepository>codehausSnapshots</allowedRepository>
  </allowedRepositories>
  ...
</requireNoRepositories>


So the question is why adding a complete new rule instead of enhancing the existing by your idea using the url as identification for the repository which i think is a really good idea...so users are not able to forge the repository they use by using a different id only the url is used to identify the allowed repositories.


Kind regards
Karl-Heinz Marbaise

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to