download binaries (incl. hashes and signatures) from ASF Maven
Repository
Why? My understanding is that this would prevent using the ASF mirrors for downloads.
See https://lists.apache.org/thread.html/r5ac69fcb1251aaad4b5c6e69e4784369c74bee0d13e3ffeb990e3e64%40%3Cdev.sling.apache.org%3E for a background. I don't think that a lot of people are downloading Sling Modules with other means than via Maven (with all its mirrors).
Ok, I have commented on our dev list - I ask that you do not merge this PR for now, while we discuss there. I think it's good to use the ASF mirrors for all downloads and as mentioned there I don't really see the problem with svn.