OpenSAML v4.0.1 Artifacts in Central Repository

[Tom Zeller]

> We sign all our artifacts, so you should of course be able to tell (aside from comparing hashes) if theyr're actually the exact copies or if somebody re-signed them. Our PGP signing keys are published and we recently cleaned them up as well and fixed some weak keys.

The opensaml-parent-4.0.1.pom artifact in Maven Central is different
than ours and obviously does not have our signature. The
<repositories> section has been removed.

Tom