|Re: [orbit-dev] Impact for Orbit of recent PDE and Tycho extensions to consume Maven libs directly?|
I think the AC is the better body to discuss this. I've added it to the agenda for our call today.
FWIW, I believe as long as there are projects consuming Orbit it will exists. However, one of the goals for EBR was always to be able to consume Maven artifacts within the same reactor build. Thus, these are great new features in Tycho.
It lacks a few features with regards to generating high quality manifests. Maybe EBR recipes can be fetched dynamically as templates and taken into account when generating the bundles?
With regards to signing this is a grey area. My current thinking is that once artifacts are no longer consumed from Eclipse.org they must not be signed with an Eclipse.org certificate. But I don't see any issue with distributing unsigned 3rd party content in the same way Maven Central distributes jars (hash validation and TLS transfer).
Back to the top