https://central.sonatype.org/faq/closed-source/