JCenter functions as a cache of multiple maven repos. When it switches repos, say from ibiblio to maven central, we may see an artifact with the same coordinates but with a different SHA. This makes reproducible builds problematic. It also introduces security concerns.
JCenter functions as a cache of multiple maven repos. When it switches repos, say from ibiblio to maven central, we may see an artifact with the same coordinates but with a different SHA. This makes reproducible builds problematic. It also introduces security concerns.