compy with sonatype-oss policies