Skip to content

Detect Java Namespaces/Group IDs by hash #887

@kmoens

Description

@kmoens

What would you like to be added:
Extends the Java Cataloger with support to determine the group id, if not present in pom.xml/pom.properties, by querying the Maven Central using the SHA-1 hash of the JAR file.

Why is this needed:
Currently there is an extensive support by the Java ecosystem to determine the correct namespace. If pom.xml or pom.properties are present, it leads to good and correct results. If they are absent it more a "guess" work currently which leads to quite a lot of incorrect Package URLs for these artifacts.

Using the search by hash would improve the correctness of the results drastically.

Additional context:
A bash script which performs this logic is available here:
https://github.com/sjbotha/make-pom/blob/master/make-pom.sh

Metadata

Metadata

Assignees

Labels

ecosystem:javarelating to the java ecosystemenhancementNew feature or request

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions