> practices consisting in shipping binaries (jars) of unknown provenance

this fits in with an article I'm thinking of writing, about various undesirable consequences to software freedom of some recent software packaging trends. thanks for providing me with yet another undesirable consequence to mention