<blockquote>
<p>I changed the Gradle build script to grab from the Maven project using the Maven plugin. Does that change anything?</p>
</blockquote>
<p>My point is, the jar you uploaded to maven could contain malicious code, but all code that you're proposing to include into Bisq should be reviewed as part of the PR review process.</p>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">—<br />You are receiving this because you are subscribed to this thread.<br />Reply to this email directly, <a href="https://github.com/bisq-network/bisq/pull/3275?email_source=notifications&email_token=AJFFTNQELLUVHGKLLTW6OKTQKFGYVA5CNFSM4IXG65PKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD66AUQI#issuecomment-532417089">view it on GitHub</a>, or <a href="https://github.com/notifications/unsubscribe-auth/AJFFTNSUXPK44XC4AP3XS4TQKFGYVANCNFSM4IXG65PA">mute the thread</a>.<img src="https://github.com/notifications/beacon/AJFFTNWXM7VNT5X4LLQTBKTQKFGYVA5CNFSM4IXG65PKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD66AUQI.gif" height="1" width="1" alt="" /></p>
<script type="application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/bisq-network/bisq/pull/3275?email_source=notifications\u0026email_token=AJFFTNQELLUVHGKLLTW6OKTQKFGYVA5CNFSM4IXG65PKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD66AUQI#issuecomment-532417089",
"url": "https://github.com/bisq-network/bisq/pull/3275?email_source=notifications\u0026email_token=AJFFTNQELLUVHGKLLTW6OKTQKFGYVA5CNFSM4IXG65PKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD66AUQI#issuecomment-532417089",
"name": "View Pull Request"
},
"description": "View this Pull Request on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
}
]</script>