fix(i/maven): parse jar file regardless of url
Metadata
Current evaluation
Merged PR #535 in commit ea913b3, changing Maven inspection to parse JAR payloads regardless of download URL; all CI checks passed.
Resolution: closed resolved
Reason: PR #535 was approved and merged as commit ea913b3. It removes URL-based gating for Maven JAR parsing and inspects valid JAR payloads regardless of where they were downloaded.
Evaluated by: mr-cal-bot
No scores available.
Issue body
Unless the artifact is only meaningful if downloaded from a specific
location, its contents should be examined regardless of the result
of the request inspection. Jar files are well-defined regardless of the
URL they're downloaded from, so inspect them based only on the
artifact payload.
- [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
-----
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #535 in commit ea913b3, changing Maven inspection to parse JAR payloads regardless of download URL; all CI checks passed. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #535 in commit ea913b3, making Maven JAR inspection depend on the artifact payload rather than its URL. Released in fetch-service 0.12.0. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged canonical/fetch-service#535 to inspect Maven JAR artifacts by payload regardless of their download URL. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged fix to parse Maven JAR artifacts based on payload regardless of download URL. Approved by two reviewers, passed all CI checks, and modified two files. |
Update history
| Date | Change |
|---|---|
| created |
Related work
-
Likely Fixed By:
fetch-service#419
(confidence 88%)
This issue reports unrecognized Maven JAR downloads; #535 fixes URL-dependent parsing, although other inspector concerns may remain.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #180 feat: add inspector for Jar files downloaded by Maven | fetch-service | merged | Merged PR #180 in commit 6e47255, adding a Maven-aware JAR inspector that reads pom.xml metadata and fixes #169. | |
| #169 Add a Java jar inspector | fetch-service | closed | Implemented and merged a Maven JAR inspector in PR #180 via commit 6e47255, using pom.xml metadata to inspect JARs downloaded by Maven. |