Discussion about the meaning of maven central vis a vis Cyber Resilience Act.
Eclipse open letter [Open Letter to the European Commission on the Cyber Resilience Act
Eclipse News, Eclipse in the News, Eclipse Announcement](https://newsroom.eclipse.org/news/announcements/open-letter-european-commission-cyber-resilience-act?hsCtaTracking=4d0a87b8-9541-4d9f-8f4a-85e7b9111a47%7C3a9afa66-5079-43a7-ba70-29fa58ed7fd2)
Jan and Arjan dissent that Maven central should be used for M1.
Vendors want Maven central used for M1.
Ed would like to make sure that our community has at least made a request of the vendors to expand their view of what is an acceptable repo to pull from for a non-final release.
Vendors: because we have a requirement for reproducible builds, for all builds, even things the vendors do not ship, we must only use an immutable repository. Therefore, we cannot depend on a mutable repo.
Jea-102 Edit spec document to apply the ruling of the spec committee regarding optional specifications. Seeking assignee for subtasks.