我正在尝试通过校验和检查来证明特定依赖项将从http://central.maven.org/maven2/的maven中央存储库正确下载。
我正在运行一个简单的项目,其中包含一个依赖项
mvn dependency:resolve
甚至使用--debug,我都没有看到它正在进行校验和验证:
[DEBUG] Using transporter WagonTransporter with priority -1.0 for http://central.maven.org/maven2/
[DEBUG] Using connector BasicRepositoryConnector with priority 0.0 for http://central.maven.org/maven2/ via myrepo:80 with username=fred, password=***
Downloading: http://central.maven.org/maven2/org/elasticsearch/elasticsearch/2.4.4/elasticsearch-2.4.4.pom
Downloaded: http://central.maven.org/maven2/org/elasticsearch/elasticsearch/2.4.4/elasticsearch-2.4.4.pom (19 KB at 6.6 KB/sec)
[DEBUG] Writing tracking file C:\.m2\repository\org\elasticsearch\elasticsearch\2.4.4\_remote.repositories
[DEBUG] Writing tracking file C:\.m2\repository\org\elasticsearch\elasticsearch\2.4.4\elasticsearch-2.4.4.pom.lastUpdated
[DEBUG] Dependency collection stats: {ConflictMarker.analyzeTime=1, ConflictMarker.markTime=0, ConflictMarker.nodeCount=54, ConflictIdSorter.graphTime=0, ConflictIdSorter.topsortTime=0, ConflictIdSorter.conflictIdCount=31, ConflictIdSorter.conflictIdCycleCount=0, ConflictResolver.totalTime=6, ConflictResolver.conflictItemCount=53, DefaultDependencyCollector.collectTime=4450, DefaultDependencyCollector.transformTime=10}
我不确定它是否有任何影响,但我将maven central设置为存储库并将checksumPolicy
设置为失败:
<repository>
<releases>
<checksumPolicy>fail</checksumPolicy>
</releases>
<id>central</id>
<name>real central</name>
<url>http://central.maven.org/maven2/</url>
</repository>