kordamp / jarviz Goto Github PK

Calculate checksums for local JARs and compare them with their remote counterpart published at Maven Central. GAV coordinates must be known.

When --gav is used and the file is downloaded (cached) for the first time there's probably no need to check.
When other inputs are given (no explicit gav) then files must be inspected for their matching /META-INF/maven/**/<artifactId>/pom.properties entry, which will provide gav coordinates. If no matching entry is found then there's no gav thus causing a failure.

Is your feature request related to a problem? Please describe.
The problem is I'm reading the documentation and I don't get it. It's not clear how to use the tool

Describe the solution you'd like
A more detailed documentation would be appreciated

Describe alternatives you've considered
Make a video tutorial and post it on youtube

Additional context
Happy new year!!

Running for example jarviz module descriptor --file <JAR> to analyze a local JAR file should not create an emtpy cache/jarviz directory (used to store copies of remote files).

Task List

• Steps to reproduce provided
• Stacktrace (if present) provided
• Example that reproduces the problem (link to git repository is ideal)
• Full description of the issue provided (see below)

Steps to Reproduce

1. Copy shell script
2. Paste into a terminal
3. See the error

Expected Behaviour

Copy/paste should do the job out of the box (for lazy people like me 💭 😄 )

Actual Behaviour

• We get an error
• We have to remove the $

Environment Information

• Operating System: Linux Mint 20.3 Una
• Jarviz Version:

openjdk version "1.8.0_265"
OpenJDK Runtime Environment (build 1.8.0_265-b01)
OpenJDK 64-Bit Server VM (build 25.265-b01, mixed mode)

Task List

• Steps to reproduce provided
• Stacktrace (if present) provided
• Example that reproduces the problem (link to git repository is ideal)
• Full description of the issue provided (see below)

Run :

jbang jarviz@kordamp --help

Get the following output :

[jbang] [ERROR] No alias found with name 'jarviz'
[jbang] Run with --verbose for more details

Environment Information

• Operating System: Linux Mint 20.3 Una
• Jarviz Version: TODO
• JDK Version: openjdk version "1.8.0_265"

Is your feature request related to a problem? Please describe.
It would be great to automatically check if jars are valid at build time.

Describe the solution you'd like
Create a Maven Enforcer rule that checks the validity of jars.

Describe alternatives you've considered
The default lifecycle phase of Maven Enforcer is validate while jars are created at package phase.
So, it might be better to create a Maven plugin instead.

Additional context

today jarviz assumes single file, url or GAV.

would be nice if --classpath or similar would be an option then you could do things like:

jarviz manifest show --classpath=jbang info classpath env@jbangdev`

And easily get info about all jars referenced on the classpath rather than the single one.

jarviz module descriptor --classpath=`jbang info classpath env@jbangdev`
java.lang.module.FindException: Unable to derive module descriptor for /Users/manderse/.m2/repository/de/vandermeer/char-translation/0.0.2/char-translation-0.0.2.jar
Unable to derive module descriptor for /Users/manderse/.m2/repository/de/vandermeer/char-translation/0.0.2/char-translation-0.0.2.jar

I would have expected it would list char-translation-0.0.2.jar to not have module descriptor together with rest of the classpath entries.