feat: add Maven POM inspector
Metadata
Current evaluation
Merged implementation of a Maven POM inspector that resolves dependencies by inspecting downloaded POM files instead of querying a central index. Approved by two reviewers, the change fixes issue #168 and modifies 8 files with 888 additions and 89 deletions.
Suggested action: —
No scores available.
Issue body
POM-based projects declared their dependencies by version; as such, when building the project Maven accesses the POM for each dependency through a fully-qualified URL that includes the group, artifact, and version.
This means that this inspector can be very simple because there is no "index" that Maven queries to determine versions; instead, we just inspect the downloaded POMs.
Fixes #168
- [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
-----
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged implementation of a Maven POM inspector that resolves dependencies by inspecting downloaded POM files instead of querying a central index. Approved by two reviewers, the change fixes issue #168 and modifies 8 files with 888 additions and 89 deletions. |
Update history
| Date | Change |
|---|---|
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #180 feat: add inspector for Jar files downloaded by Maven | fetch-service | merged | Merged a Maven JAR file inspector that reads metadata from pom.xml files to supplement limited JAR manifests. Approved by two reviewers, passed CI, and resolved issue #169 with 371 lines added across six files. | |
| #200 docs: document the Maven inspectors | fetch-service | merged | Merged documentation update adding Maven inspector details across three files (+124/-0). Resolves issue #184. Approved by two reviewers. A minor failing unit test was noted but addressed separately, allowing the merge to proceed. |