See if it can be private. We are not providing OpenSAML, we are providing SAML capability via our JEE Webservices, so storage & messaging jars must not be required to provide our JAXWS capabilities, thus we do not ship them. Right now is public so users would expect to have the storage & messaging at least in the BOM files.