feat: add inspector for Jar files downloaded by Maven
Metadata
Current evaluation
Merged PR #180 in commit 6e47255, adding a Maven-aware JAR inspector that reads pom.xml metadata and fixes #169.
Resolution: closed resolved
Reason: PR #180 was approved and merged into main as commit 6e47255. Its Maven inspector reads Maven pom.xml metadata for JAR files and resolved fetch-service#169.
Evaluated by: mr-cal-bot
No scores available.
Issue body
The "downloaded by Maven" bit here is because Jar files by themselves have a manifest that is quite poor in metadata, so the inspector looks into Maven's pom.xml files.
Fixes #169
- [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
-----
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #180 in commit 6e47255, adding a Maven-aware JAR inspector that reads pom.xml metadata and fixes #169. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged #180 (commit 6e47255), adding a JAR inspector that uses Maven pom.xml metadata and fixes #169. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged a Maven JAR file inspector that reads metadata from pom.xml files to supplement limited JAR manifests. Approved by two reviewers, passed CI, and resolved issue #169 with 371 lines added across six files. |
Update history
| Date | Change |
|---|---|
| created |
Related work
-
Related To:
canonical/fetch-service#169
(confidence 100%)
This issue requested a Java JAR inspector and was fixed by the merged implementation in #180.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #169 Add a Java jar inspector | fetch-service | closed | Implemented and merged a Maven JAR inspector in PR #180 via commit 6e47255, using pom.xml metadata to inspect JARs downloaded by Maven. | |
| #192 feat: add Maven POM inspector | fetch-service | merged | Merged PR #192 as commit 8a6ca8b, adding a Maven POM inspector that inspects downloaded dependency POMs and fixes #168. | |
| #168 Add a Maven registry inspector | fetch-service | closed | Maven inspector request (CRAFT-3155) delivered by PRs #180 (jar) and #192 (pom), plus docs #200; registered as maven.NewJarInspector/NewPomInspector. Tracking issue then closed. | |
| #535 fix(i/maven): parse jar file regardless of url | fetch-service | merged | Merged PR #535 in commit ea913b3, changing Maven inspection to parse JAR payloads regardless of download URL; all CI checks passed. |