I am not sure how this will work: Building from rpm basically means that
every dependency comes from the rpm package db. But maven will happily
download from "the outside".
This means: One cannot rebuild from (signed and trusted) rpm packages
only but has to trust some other (untrusted) servers.
Do you plan to adress this issue? Maybe it would be a goog idea if one
could build a maven repo from rpm packages?