Maven 1

Checking of downloaded jars and other artifacts

Details

  • Type: New Feature New Feature
  • Status: Closed Closed
  • Priority: Minor Minor
  • Resolution: Fixed
  • Affects Version/s: 1.0.2, 1.1-beta-2
  • Fix Version/s: 1.1-beta-3
  • Component/s: core
  • Labels:
    None
  • Environment:
    all
  • Number of attachments :
    0

Description

Maven should check downloaded artifacts for integrety, especially .jar files, since they can get corrupted by e.g. bad cvswrappers (no -kb) and other things. Right now there is no way to now if a .jar is containing all information once the filename exists in the local repository

/peter

Issue Links

Activity

Hide
Piotr Maj added a comment -

+1 for resolving this issue. I'am unhappy user of very slow and bad connection and sometimes downloading of artifacts fails. After I retry executing the goal Maven doesn't reget partial missing file but it treats the broken jar as valid. The task execution fails.

I suggest downloading artifacts to temporary directory instead of repository dir and check the md5 sum before copying the jar to it's destination location in local repository. It will be safer and should eliminate the problems with repository integrity.

Show
Piotr Maj added a comment - +1 for resolving this issue. I'am unhappy user of very slow and bad connection and sometimes downloading of artifacts fails. After I retry executing the goal Maven doesn't reget partial missing file but it treats the broken jar as valid. The task execution fails. I suggest downloading artifacts to temporary directory instead of repository dir and check the md5 sum before copying the jar to it's destination location in local repository. It will be safer and should eliminate the problems with repository integrity.
Hide
Nicky Sandhu added a comment -

This should be a major bug... Spent half a day tracking maven failure to one corrupted jar file. Whats the md5 for if its not being used??

Show
Nicky Sandhu added a comment - This should be a major bug... Spent half a day tracking maven failure to one corrupted jar file. Whats the md5 for if its not being used??

People

Vote (9)
Watch (4)

Dates

  • Created:
    Updated:
    Resolved: