 along with digests that anyone can reliably use to validate the downloaded archives.</p>

        <p>Releases are signed and the release area on the website includes hashes and links to KEYs files.</p>

        <h3>RE40</h3>

        <p>The project can distribute convenience binaries alongside source code, but they are not Apache Releases, they are provided with no guarantee.</p>

        <p>Convenience binaries are distributed alongside source releases. Their LICENSE and NOTICE files are correct.</p>

   