Details
-
Bug
-
Resolution: Won't Do
-
Major
-
None
-
None
-
None
-
None
Description
I just noticed that the artifacts uploaded to staging repos are immediately available in search results. See for example (valid on 2015-03-03 1pm CEST) https://repository.jboss.org/nexus/index.html#nexus-search;quick~drools-distribution. The artifact in drools-distribution version 6.2.0.Final is coming from staging repository and it is available to download via the Nexus UI.
It is very easy to overlook that the artifact is actually coming from the staging repo. If people download this one and then later for some reason (e.g. critical issue found), the artifacts need to be rebuilt, users will end-up with 6.2.0.Final that is different from the correct one, released later.
Users may then report issues against 6.2.0.Final which could be actually already fixed.
From my point of view this may bring a lot of confusion.
