[tor-bugs] #13166 [metrics-lib]: Release metrics-lib version 1.0.0

[Tor Bug Tracker & Wiki]

#13166: Release metrics-lib version 1.0.0
-------------------------+------------------------------
 Reporter:  karsten      |          Owner:  karsten
     Type:  enhancement  |         Status:  needs_review
 Priority:  Medium       |      Milestone:
Component:  metrics-lib  |        Version:
 Severity:  Normal       |     Resolution:
 Keywords:               |  Actual Points:
Parent ID:               |         Points:
  Sponsor:               |
-------------------------+------------------------------

Comment (by iwakeh):

 Great!
 The verifying works fine.

 Well, adding the external libs to the tar (and maybe also signing the
 external jars) would make
 explicit what external software was used. And with the hashes in the
 signed jars one could verify,
 if these are the same as those available from other sources, on a class
 file level. That's the tin-hatty reasoning.

 The second reason is convenience: I can just download the tar and have
 everything - verified by the Torproject - in place for deploying
 descriptor in my project and/or for starting development on it.
 This is just one simple download instead of searching for the deps in the
 web or adding packets to my linux system.
 A tar with everything (signed class jar, sources jar, external jars) will
 provide this.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13166#comment:17>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online