Hi,
from rescuedjars.xml, i have seen castor 1.0.5 which is available at:

<repository>
<id>codehaus-snapshots</id>
<name>Maven Codehaus Snapshots</name>
<url>http://maven.codehaus.org/maven2/</url>
</repository>


Also, one of the best practices as seen from
JBoss.org is to make available all the dependencies
from a locally mirrored repository.

Just my contribution.