-
Notifications
You must be signed in to change notification settings - Fork 696
Description
What would you like to be added:
Extends the Java Cataloger with support to determine the group id, if not present in pom.xml/pom.properties, by querying the Maven Central using the SHA-1 hash of the JAR file.
Why is this needed:
Currently there is an extensive support by the Java ecosystem to determine the correct namespace. If pom.xml or pom.properties are present, it leads to good and correct results. If they are absent it more a "guess" work currently which leads to quite a lot of incorrect Package URLs for these artifacts.
Using the search by hash would improve the correctness of the results drastically.
Additional context:
A bash script which performs this logic is available here:
https://github.com/sjbotha/make-pom/blob/master/make-pom.sh