3
Stephen Colebourne's blog: Java release chains - Splitting features from security (blog.joda.org)