Thank you, Nick!  That was my memory, but it was hazy.  I can't quickly figure out where that is documented...any pointers?  Or should we look to document it via a LEGAL issue or somewhere else?

-----Original Message-----
From: Nick Burch [mailto:[EMAIL PROTECTED]]
Sent: Monday, February 5, 2018 9:42 AM
To: [EMAIL PROTECTED]
Subject: Re: relying on a non-Maven central repo?

On Mon, 5 Feb 2018, Allison, Timothy B. wrote:

Nope. ASF policy is that we can only rely on maven central stored dependencies. That's why we've had to upload things on behalf of some other projects in the past

Nick