feat: add inspector for Jar files downloaded by Maven
Metadata
Current evaluation
Merged a Maven JAR file inspector that reads metadata from pom.xml files to supplement limited JAR manifests. Approved by two reviewers, passed CI, and resolved issue #169 with 371 lines added across six files.
Suggested action: —
No scores available.
Issue body
The "downloaded by Maven" bit here is because Jar files by themselves have a manifest that is quite poor in metadata, so the inspector looks into Maven's pom.xml files.
Fixes #169
- [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
-----
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged a Maven JAR file inspector that reads metadata from pom.xml files to supplement limited JAR manifests. Approved by two reviewers, passed CI, and resolved issue #169 with 371 lines added across six files. |
Update history
| Date | Change |
|---|---|
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #192 feat: add Maven POM inspector | fetch-service | merged | Merged implementation of a Maven POM inspector that resolves dependencies by inspecting downloaded POM files instead of querying a central index. Approved by two reviewers, the change fixes issue #168 and modifies 8 files with 888 additions and 89 deletions. | |
| #419 Missing inspectors for JARs (Maven) | fetch-service | open | Missing inspectors for JARs (Maven) causing artifact inspection failures; PR #180 merged a JAR inspector but mimetype application/java-archive remains missing from mimetypes.go | |
| #200 docs: document the Maven inspectors | fetch-service | merged | Merged documentation update adding Maven inspector details across three files (+124/-0). Resolves issue #184. Approved by two reviewers. A minor failing unit test was noted but addressed separately, allowing the merge to proceed. |