yeah, that hang was very frustrating - might be nice to have a timeout but could be tricky because we want to allow time for the jars to upload in a legitimate publish.