jira-importer commented on issue #481: URL: https://github.com/apache/maven-apache-parent/issues/481#issuecomment-2771736268
**[Herve Boutemy](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=hboutemy)** commented > but to be honest reproducible builds for pom only projects don't seem to be that reasonable. Apache official release is source = source-release.zip: do you think it is not reasonable to achieve reproducibility for Apache official release? And I will anticipate a little bit: with Maven 4 differentiating build vs consumer POM, in the future, the published pom.xml will be different from pom.xml in Git, then checking its reproducibility won't seem so trivial And even for now: did you know that from one unique content in Git, there can be 2 different pom.xml content published to Central, based on the OS from the release manager (Windows or not)? do you confirm "reproducible builds for pom only projects don't seem to be that reasonable"? > This is not that easy to achieve as the rule requireProperty does not distinguish between inherited and local properties I know I know, that's why I should have reviewed this issue before because I should have anticipated there was something broken in the implementation Notice: I don't judge, I'm not angry, I know that all was done with best intentions and I hoped that you had found the right way to do the check because I loved the intent. Thank you for all your efforts -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
