Feedback on server jar mirror.

[chocolatecooke]

Hello,

I've been developing a completely automatic server jar mirror.

All jars on our site are updated hourly automatically by our system, i'm looking for suggestions and feedback on the site design.

It currently has;
CraftBukkit
Spigot
PaperSpigot
Bungeecord

Any other jars you would like added + ideas would be deeply appreciated!

An example of this is, within an hour after spigot 1.13 (Just an example) is released on spigotmc (Therefore no need to compile yourself), it will be live on our site ready for you to download, alongside it will also provide an updated craftbukkit on the site with the spigot 1.13 release.

Thank you!

https://serverjars.com

 

[chocolatecooke]

Reserved for information -
TacoSpigot Added.

 

[Spenser]

Would you be able to add LilyPad , TacoSpigot , WaterFall?

 

[chocolatecooke]

Would you be able to add LilyPad , TacoSpigot , WaterFall?

I will look into adding them onto the site, if there would be enough demand?

 

[HatefulMoron]

Since there's no way to know what you're downloading from this site is what OP claims you are downloading I would caution people from using this. Some files could be hashed on the website with a link to the real file to assert the validity of the hash but then what's the point in using the website at all. Some jars, Spigot for example, are compiled through a build tool which would definitely make it hard to tell the validity of the jar.

If you want to get the latest build of whatever software, download it from the certifiable source; the creators. Spigot, for example, already offers a direct link to the most up to date build of Spigot on the Jenkins CI.

 

[chocolatecooke]

Since there's no way to know what you're downloading from this site is what OP claims you are downloading I would caution people from using this. Some files could be hashed on the website with a link to the real file to assert the validity of the hash but then what's the point in using the website at all. Some jars, Spigot for example, are compiled through a build tool which would definitely make it hard to tell the validity of the jar.

If you want to get the latest build of whatever software, download it from the certifiable source; the creators. Spigot, for example, already offers a direct link to the most up to date build of Spigot on the Jenkins CI.

Decompile the jars.
You have more than one mirror like GetBukkit, these jars do not get modified by our system, if you found anything, which you will not, put a report on me.

Otherwise, thank you for your "feedback"[DOUBLEPOST=1515230360][/DOUBLEPOST]

Since there's no way to know what you're downloading from this site is what OP claims you are downloading I would caution people from using this. Some files could be hashed on the website with a link to the real file to assert the validity of the hash but then what's the point in using the website at all. Some jars, Spigot for example, are compiled through a build tool which would definitely make it hard to tell the validity of the jar.

If you want to get the latest build of whatever software, download it from the certifiable source; the creators. Spigot, for example, already offers a direct link to the most up to date build of Spigot on the Jenkins CI.

All build on buildtools, require you to compile them, through buildtools, that's part the reason why this site exists, so you don't have too, I understand you question the safety of the site, but the same thing goes for Yives and GetBukkit, both popular jar mirrors.

 

[HatefulMoron]

Decompile the jars.
You have more than one mirror like GetBukkit, these jars do not get modified by our system, if you found anything, which you will not, put a report on me.

Otherwise, thank you for your "feedback"

I don't understand your reasoning here.

Sure, I could download your jar and make sure it's the same as every other version of the jar but you're missing the point. Why use this service then? Surely the appeal is based on the ease of use. If downloading from your website requires me to make sure what I'm downloading is secure, why not just download from Bukkit directly?

Otherwise, thank you for your "feedback"

"You're welcome."

All build on buildtools, require you to compile them, through buildtools, that's part the reason why this site exists, so you don't have too, I understand you question the safety of the site, but the same thing goes for Yives and GetBukkit, both popular jar mirrors.

This is for Spigot in particular, Bukkit offers direct downloads of precompiled jar binaries. In my own opinion, if you're defending the validity of your upcoming platform by saying "it's the same as everyone else", why introduce it in the first place?

Other than that, I think websites like these do offer a valuable resource to the community. All I'm saying is that if you have the spare time (and it's not a lot), get the software from the creators.

 

[chocolatecooke]

I don't understand your reasoning here.

Sure, I could download your jar and make sure it's the same as every other version of the jar but you're missing the point. Why use this service then? Surely the appeal is based on the ease of use. If downloading from your website requires me to make sure what I'm downloading is secure, why not just download from Bukkit directly?


"You're welcome."



This is for Spigot in particular, Bukkit offers direct downloads of precompiled jar binaries. In my own opinion, if you're defending the validity of your upcoming platform by saying "it's the same as everyone else", why introduce it in the first place?

Other than that, I think websites like these do offer a valuable resource to the community. All I'm saying is that if you have the spare time (and it's not a lot), get the software from the creators.

I see, the entire point of my site was for ease of use, it's easier to go to a site and download the jar and not have to wait for it to compile, and download git.
I understand the whole risk problem, and that is based on the fact if you trust my site or not, I do not charge and I will never charge, it was more of a community benefit, I plan on having a few people remotely log into my server and check my code, for validation that they're not modified by the system if that sets your mind at ease.

Eitherway, in this case atleast, I wouldn't understand the first thing about hashing etc, this is because I absolutely know nothing about java and code, or anything related to java in the first place.

I'm simply trying to provide a different mirror that anyone can come too for the latest spigot release within the hour, or any release our system adds to the site.

Additionally, when I use to run a host, I would download all the jars I could possibly find, and create a multicraft conf, so that people can use them jars on the panel.
I plan on having the system automatically generated these configuration files, so a simple download and you will have every *main* jar ready to be uploaded for direct use with multicraft, if that is wanted of course, I have the code waiting, was not sure if it would be used.[DOUBLEPOST=1515231829][/DOUBLEPOST]Being able to download any jar on our site instantly, all in one place is the entire point of this site.

Thank you

 

[Chad Griffith]

I see, the entire point of my site was for ease of use, it's easier to go to a site and download the jar and not have to wait for it to compile, and download git.
I understand the whole risk problem, and that is based on the fact if you trust my site or not, I do not charge and I will never charge, it was more of a community benefit, I plan on having a few people remotely log into my server and check my code, for validation that they're not modified by the system if that sets your mind at ease.

Eitherway, in this case atleast, I wouldn't understand the first thing about hashing etc, this is because I absolutely know nothing about java and code, or anything related to java in the first place.

I'm simply trying to provide a different mirror that anyone can come too for the latest spigot release within the hour, or any release our system adds to the site.

Additionally, when I use to run a host, I would download all the jars I could possibly find, and create a multicraft conf, so that people can use them jars on the panel.
I plan on having the system automatically generated these configuration files, so a simple download and you will have every *main* jar ready to be uploaded for direct use with multicraft, if that is wanted of course, I have the code waiting, was not sure if it would be used.[DOUBLEPOST=1515231829][/DOUBLEPOST]Being able to download any jar on our site instantly, all in one place is the entire point of this site.

Thank you

Since there's no way to know what you're downloading from this site is what OP claims you are downloading I would caution people from using this. Some files could be hashed on the website with a link to the real file to assert the validity of the hash but then what's the point in using the website at all. Some jars, Spigot for example, are compiled through a build tool which would definitely make it hard to tell the validity of the jar.

If you want to get the latest build of whatever software, download it from the certifiable source; the creators. Spigot, for example, already offers a direct link to the most up to date build of Spigot on the Jenkins CI.

I am the hosting provider for my good friend here and I have personally validated that his site is in fact clean and trustworthy at this time. He seems to really care about offering a reliable resource to the community so lets cut the guy some slack shall we?