Apache Gossip™ (incubating) is released as a source artifact, and also through Maven.
|0.1.1-incubating||29 Jan 2017||6720f35||zip (md5 pgp)|
Choose a source distribution in either tar or zip format, and verify using the corresponding pgp signature (using the committer file in KEYS). If you cannot do that, the md5 hash file may be used to check that the download has completed OK.
For fast downloads, current source distributions are hosted on mirror servers; older source distributions are in the archive. If a download from a mirror fails, retry, and the second download will likely succeed.
For security, hash and signature files are always hosted at Apache.