This message was deleted.

Generally, I'm majorly against any automatic repository adding by any plugin or task. If it is in

project.repositories

, you break

FAIL_ON_PROJECT_REPOS

. If you do it on

dependencyResolutionManagement

it might not work if someone has

project

repositories and has the default repositories mode. And in both cases you might break some company guidelines saying that only the one internal master repository mirror and server must be used in any build, which sometimes is even verified using a plugin that iterates all kinds of repository containers and fails if it finds something it doesn't like. So imho it should always be opt-in, but at least opt-out, and never unconditional.