The most recent source and binary releases for the Apache Commons project are available from this directory listing. For older releases, please use the archives.
Name Last modified Size Description
Parent Directory - bcel/ 08-Dec-2017 20:08 - beanutils/ 04-Oct-2017 12:56 - bsf/ 04-Oct-2017 12:56 - chain/ 04-Oct-2017 12:56 - cli/ 04-Oct-2017 12:56 - codec/ 23-Mar-2018 20:22 - collections/ 23-Mar-2018 20:22 - commons-build-plugin/ 04-Oct-2017 12:56 - commons-parent/ 15-Mar-2018 15:13 - commons-release-plugin/ 05-Mar-2018 19:22 - compress/ 10-Feb-2018 09:19 - configuration/ 12-Oct-2017 21:35 - crypto/ 04-Oct-2017 12:56 - csv/ 04-Oct-2017 12:56 - daemon/ 22-Nov-2017 20:22 - dbcp/ 27-Dec-2017 02:51 - dbutils/ 04-Oct-2017 12:56 - digester/ 04-Oct-2017 12:56 - email/ 23-Mar-2018 20:22 - exec/ 04-Oct-2017 12:56 - fileupload/ 04-Oct-2017 12:56 - httpclient/ 30-Apr-2016 00:24 - io/ 20-Oct-2017 08:19 - jci/ 23-Mar-2018 20:22 - jcs/ 04-Oct-2017 12:56 - jelly/ 04-Oct-2017 12:56 - jexl/ 04-Oct-2017 12:56 - jxpath/ 04-Oct-2017 12:56 - lang/ 08-Nov-2017 17:02 - logging/ 23-Mar-2018 20:22 - math/ 23-Mar-2018 20:22 - net/ 04-Oct-2017 12:56 - pool/ 20-Dec-2017 00:48 - proxy/ 04-Oct-2017 12:56 - rdf/ 23-Dec-2017 20:57 - rng/ 04-Oct-2017 12:56 - sanselan/ 04-Oct-2017 12:56 - scxml/ 04-Oct-2017 12:56 - text/ 23-Mar-2018 16:01 - validator/ 04-Oct-2017 12:56 - vfs/ 06-Oct-2017 20:46 - weaver/ 04-Oct-2017 12:56 -
Do not download from www.apache.org. Please use a nearby mirror site to help us save apache.org bandwidth.
All of the release distribution packages have been digitally
signed (using PGP or GPG) by the ASF committers that constructed
There will be an accompanying distribution.asc file in the same directory as the distribution.
The PGP/GPG keys can be found at the MIT key repository and within this project's KEYS file at https://www.apache.org/dist/commons/KEYS
Always use the signature to validate package authenticity, e.g., $ pgpk -a KEYS $ pgpv commons-logging-1.2-bin.tar.gz.asc or, $ pgp -ka KEYS $ pgp commons-logging-1.2-bin.tar.gz.asc or $ gpg --import KEYS $ gpg --verify commons-logging-1.2-bin.tar.gz.asc commons-logging-1.2-bin.tar.gz
See also Verifying Apache Software Foundation Releases
We also offer MD5/SHA hashes as an alternative to validate the
integrity of the downloaded files. See the
Note that such hashes are only useful as a check that the file has been downloaded OK. They do not provide any guarantee that the downloaded file is authentic.