title: Maven and ibiblio
body: <p>I searched a lot in apache documentation and ibiblio.org and I could not find a decent straight answer.</p>
  
  <p>My questions:</p>
  
  <ol>
  <li>When I download a jar using maven dependency (setup in pom), how can I be sure that the file does not change on the remote repository? for example, if I'm using log4j version 1.2.3,  downloaded from ibiblio.org (or any other repo for that matter), how can I be sure I'm getting the exact same jar each time?</li>
  <li>Does maven delete jars from the local repository? let's assume I'm not clearing the repository at all, will it fill up eventually? or does maven have some kind of mechanism to clear old jars?</li>
  </ol>