fix(java): improvements to maven groupid lookups

Signed-off-by: Weston Steimel <commits@weston.slmail.me>
Fix: repeatedly dereference pom variables (#2781 )
2026-10-13 06:37:22 +02:00 · 2024-04-18 15:47:08 +01:00 · 2024-04-16 15:44:02 -04:00 · 2024-04-16 11:05:35 -04:00 · 2024-04-15 11:15:38 -04:00 · 2024-04-15 10:00:54 -04:00
23 changed files with 823 additions and 123 deletions
@@ -42,7 +42,7 @@ tools:
  # used for signing the checksums file at release
  - name: cosign
    version:
-      want: v2.2.3
+      want: v2.2.4
    method: github-release
    with:
      repo: sigstore/cosign
@@ -103,7 +103,7 @@ tools:
  # used for running all local and CI tasks
  - name: task
    version:
-      want: v3.35.1
+      want: v3.36.0
    method: github-release
    with:
      repo: go-task/task
@@ -45,7 +45,7 @@ jobs:

    # Initializes the CodeQL tools for scanning.
    - name: Initialize CodeQL
-      uses: github/codeql-action/init@1b1aada464948af03b950897e5eb522f92603cc2 #v3.24.9
+      uses: github/codeql-action/init@df5a14dc28094dc936e103b37d749c6628682b60 #v3.25.0
      with:
        languages: ${{ matrix.language }}
        # If you wish to specify custom queries, you can do so here or in a config file.
@@ -56,7 +56,7 @@ jobs:
    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
    # If this step fails, then you should remove it and run the build manually (see below)
    - name: Autobuild
-      uses: github/codeql-action/autobuild@1b1aada464948af03b950897e5eb522f92603cc2 #v3.24.9
+      uses: github/codeql-action/autobuild@df5a14dc28094dc936e103b37d749c6628682b60 #v3.25.0

    # ℹ️ Command-line programs to run using the OS shell.
    # 📚 https://git.io/JvXDl
@@ -70,4 +70,4 @@ jobs:
    #   make release

    - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@1b1aada464948af03b950897e5eb522f92603cc2 #v3.24.9
+      uses: github/codeql-action/analyze@df5a14dc28094dc936e103b37d749c6628682b60 #v3.25.0
@@ -50,7 +50,7 @@ jobs:
          app_id: ${{ secrets.TOKEN_APP_ID }}
          private_key: ${{ secrets.TOKEN_APP_PRIVATE_KEY }}

-      - uses: peter-evans/create-pull-request@70a41aba780001da0a30141984ae2a0c95d8704e #v6.0.2
+      - uses: peter-evans/create-pull-request@c55203cfde3e5c11a452d352b4393e68b85b4533 #v6.0.3
        with:
          signoff: true
          delete-branch: true
@@ -33,7 +33,7 @@ jobs:
          app_id: ${{ secrets.TOKEN_APP_ID }}
          private_key: ${{ secrets.TOKEN_APP_PRIVATE_KEY }}

-      - uses: peter-evans/create-pull-request@70a41aba780001da0a30141984ae2a0c95d8704e #v6.0.2
+      - uses: peter-evans/create-pull-request@c55203cfde3e5c11a452d352b4393e68b85b4533 #v6.0.3
        with:
          signoff: true
          delete-branch: true
@@ -44,7 +44,7 @@ jobs:
          app_id: ${{ secrets.TOKEN_APP_ID }}
          private_key: ${{ secrets.TOKEN_APP_PRIVATE_KEY }}

-      - uses: peter-evans/create-pull-request@70a41aba780001da0a30141984ae2a0c95d8704e #v6.0.2
+      - uses: peter-evans/create-pull-request@c55203cfde3e5c11a452d352b4393e68b85b4533 #v6.0.3
        with:
          signoff: true
          delete-branch: true
@@ -390,7 +390,7 @@ tasks:

  generate-cpe-dictionary-index:
    desc: Generate the CPE index based off of the latest available CPE dictionary
-    dir: "syft/pkg/cataloger/common/cpe/dictionary"
+    dir: "syft/pkg/cataloger/internal/cpegenerate/dictionary"
    cmds:
      - "go generate"

@@ -51,17 +51,17 @@ var noAssertion = map[string]string{
 	"/packages/TwilioNotifier.hpi:WEB-INF/lib/sdk-3.0.jar":                                           "pkg:maven/sdk/sdk@3.0",

 	// syft generates incorrect purls
-	"/packages/akka-actor_2.13-2.6.6.jar":                        "pkg:maven/com.typesafe.akka/akka-actor_2.13@2.6.6",
-	"/packages/akka-management-cluster-bootstrap_2.13-1.2.0.jar": "pkg:maven/com.lightbend.akka.management/akka-management-cluster-bootstrap_2.13@1.2.0",
-	"/packages/hudson.war:WEB-INF/lib/asm-2.2.3.jar":             "pkg:maven/asm/asm@2.2.3",
-	"/packages/hudson.war:WEB-INF/lib/asm-commons-2.2.3.jar":     "pkg:maven/asm/asm-commons@2.2.3",
-	"/packages/hudson.war:WEB-INF/lib/asm-tree-2.2.3.jar":        "pkg:maven/asm/asm-tree@2.2.3",
-	"/packages/hudson.war:WEB-INF/slave.jar":                     "pkg:maven/org.jvnet.hudson.main/remoting@1.390",
-	"/packages/hudson.war:WEB-INF/lib/xpp3_min-1.1.4c.jar":       "pkg:maven/xpp3_min/xpp3_min@1.1.4c",
-	"/packages/hudson.war:WEB-INF/lib/xpp3-1.1.4c.jar":           "pkg:maven/xpp3/xpp3@1.1.4c",
-	"/packages/hudson.war:WEB-INF/hudson-cli.jar":                "pkg:maven/org.jvnet.hudson.main/hudson-cli@1.390",
-	"/packages/hudson.war:WEB-INF/lib/dom4j-1.6.1-hudson-3.jar":  "pkg:maven/org.jvnet.hudson.dom4j/dom4j@1.6.1-hudson-3",
-	"/packages/xpp3_min-1.1.4c.jar":                              "pkg:maven/xpp3/xpp3_min@1.1.4c",
+	//"/packages/akka-actor_2.13-2.6.6.jar":                        "pkg:maven/com.typesafe.akka/akka-actor_2.13@2.6.6",
+	//"/packages/akka-management-cluster-bootstrap_2.13-1.2.0.jar": "pkg:maven/com.lightbend.akka.management/akka-management-cluster-bootstrap_2.13@1.2.0",
+	"/packages/hudson.war:WEB-INF/lib/asm-2.2.3.jar":            "pkg:maven/asm/asm@2.2.3",
+	"/packages/hudson.war:WEB-INF/lib/asm-commons-2.2.3.jar":    "pkg:maven/asm/asm-commons@2.2.3",
+	"/packages/hudson.war:WEB-INF/lib/asm-tree-2.2.3.jar":       "pkg:maven/asm/asm-tree@2.2.3",
+	"/packages/hudson.war:WEB-INF/slave.jar":                    "pkg:maven/org.jvnet.hudson.main/remoting@1.390",
+	"/packages/hudson.war:WEB-INF/lib/xpp3_min-1.1.4c.jar":      "pkg:maven/xpp3_min/xpp3_min@1.1.4c",
+	"/packages/hudson.war:WEB-INF/lib/xpp3-1.1.4c.jar":          "pkg:maven/xpp3/xpp3@1.1.4c",
+	"/packages/hudson.war:WEB-INF/hudson-cli.jar":               "pkg:maven/org.jvnet.hudson.main/hudson-cli@1.390",
+	"/packages/hudson.war:WEB-INF/lib/dom4j-1.6.1-hudson-3.jar": "pkg:maven/org.jvnet.hudson.dom4j/dom4j@1.6.1-hudson-3",
+	"/packages/xpp3_min-1.1.4c.jar":                             "pkg:maven/xpp3/xpp3_min@1.1.4c",

 	// syft generates an unstable purl
 	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-auth":                         "pkg:maven/org.apache.dubbo/dubbo-auth@3.1.4",
@@ -113,27 +113,467 @@ var noAssertion = map[string]string{
 	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-xds":                          "pkg:maven/org.apache.dubbo/dubbo-xds@3.1.4",
 	"/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo":                              "pkg:maven/org.apache.dubbo/dubbo@3.1.4",
 	"/packages/dubbo-3.1.4.jar":                                                     "pkg:maven/org.apache.dubbo/dubbo@3.1.4",
+
+	// TODO: Figure out newrelic stuff
+	"/packages/newrelic-agent-8.8.0.jar:agent-bridge-datastore.jar":                                                                          "pkg:maven/com.newrelic.agent.java/agent-bridge-datastore@8.8.0",
+	"/packages/newrelic-agent-8.8.0.jar:agent-bridge.jar":                                                                                    "pkg:maven/com.newrelic.agent.java/agent-bridge@8.8.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/akka-2.2-1.0.jar":                                                                    "pkg:maven/com.newrelic.instrumentation.akka-2.2/akka@2.2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/akka-http-2.11_2.4.5-1.0.jar":                                                        "pkg:maven/com.newrelic.instrumentation.akka-http-2.11_2.4.5/akka-http@2.11_2.4.5-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/akka-http-2.13_10.1.8-1.0.jar":                                                       "pkg:maven/com.newrelic.instrumentation.akka-http-2.13_10.1.8/akka-http@2.13_10.1.8-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/akka-http-core-0.4-1.0.jar":                                                          "pkg:maven/com.newrelic.instrumentation.akka-http-core-0.4/akka-http-core@0.4-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/akka-http-core-0.7-1.0.jar":                                                          "pkg:maven/com.newrelic.instrumentation.akka-http-core-0.7/akka-http-core@0.7-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/akka-http-core-1.0-1.0.jar":                                                          "pkg:maven/com.newrelic.instrumentation.akka-http-core-1.0/akka-http-core@1.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/akka-http-core-10.0-1.0.jar":                                                         "pkg:maven/com.newrelic.instrumentation.akka-http-core-10.0/akka-http-core@10.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/akka-http-core-10.2.0-1.0.jar":                                                       "pkg:maven/com.newrelic.instrumentation.akka-http-core-10.2.0/akka-http-core@10.2.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/akka-http-core-2.11_10.0.11-1.0.jar":                                                 "pkg:maven/com.newrelic.instrumentation.akka-http-core-10.0.11/akka-http-core@2.11_10.0.11-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/akka-http-core-2.13_10.1.8-1.0.jar":                                                  "pkg:maven/com.newrelic.instrumentation.akka-http-core-2.13_10.1.8/akka-http-core@2.13_10.1.8-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/akka-http-core-2.13_10.2.0-1.0.jar":                                                  "pkg:maven/com.newrelic.instrumentation.akka-http-core-2.13_10.2.0/akka-http-core@2.13_10.2.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/anorm-2.3-1.0.jar":                                                                   "pkg:maven/com.newrelic.instrumentation.anorm-2.3/anorm@2.3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/anorm-2.4-1.0.jar":                                                                   "pkg:maven/com.newrelic.instrumentation.anorm-2.4/anorm@2.4-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/apache-log4j-1-1.0.jar":                                                              "pkg:maven/com.newrelic.instrumentation.apache-log4j-1/apache-log4j@1-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/apache-log4j-2.11-1.0.jar":                                                           "pkg:maven/com.newrelic.instrumentation.apache-log4j-2.11/apache-log4j@2.11-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/apache-log4j-2.6-1.0.jar":                                                            "pkg:maven/com.newrelic.instrumentation.apache-log4j-2.6/apache-log4j@2.6-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/apache-struts-2.0-1.0.jar":                                                           "pkg:maven/com.newrelic.instrumentation.apache-struts-2.0/apache-struts@2.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/async-http-client-2.0.0-1.0.jar":                                                     "pkg:maven/com.newrelic.instrumentation.async-http-client-2.0.0/async-http-client@2.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/async-http-client-2.1.0-1.0.jar":                                                     "pkg:maven/com.newrelic.instrumentation.async-http-client-2.1.0/async-http-client@2.1.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/aws-java-sdk-dynamodb-1.11.106-1.0.jar":                                              "pkg:maven/com.newrelic.instrumentation.aws-java-sdk-dynamodb-1.11.106/aws-java-sdk-dynamodb@1.11.106-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/aws-java-sdk-dynamodb-2.15.34-1.0.jar":                                               "pkg:maven/com.newrelic.instrumentation.aws-java-sdk-dynamodb-2.15.34/aws-java-sdk-dynamodb@2.15.34-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/aws-java-sdk-s3-1.2.13-1.0.jar":                                                      "pkg:maven/com.newrelic.instrumentation.aws-java-sdk-s3-1.2.13/aws-java-sdk-s3@1.2.13-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/aws-java-sdk-s3-2.0-1.0.jar":                                                         "pkg:maven/com.newrelic.instrumentation.aws-java-sdk-s3-2.0/aws-java-sdk-s3@2.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/aws-java-sdk-sns-1.11.12-1.0.jar":                                                    "pkg:maven/com.newrelic.instrumentation.aws-java-sdk-sns/aws-java-sdk-sns@1.11.12-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/aws-java-sdk-sns-2.0-1.0.jar":                                                        "pkg:maven/com.newrelic.instrumentation.aws-java-sdk-sns-2.0/aws-java-sdk-sns@2.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/aws-java-sdk-sqs-1.10.44-1.0.jar":                                                    "pkg:maven/com.newrelic.instrumentation.aws-java-sdk-sqs-1.10.44/aws-java-sdk-sqs@1.10.44-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/aws-java-sdk-sqs-2.1.0-1.0.jar":                                                      "pkg:maven/com.newrelic.instrumentation.aws-java-sdk-sqs-2.1.0/aws-java-sdk-sqs@2.1.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/aws-wrap-0.7.0-1.0.jar":                                                              "pkg:maven/com.newrelic.instrumentation.aws-wrap-0.7.0/aws-wrap@0.7.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/cassandra-datastax-3.0.0-1.0.jar":                                                    "pkg:maven/com.newrelic.instrumentation.cassandra-datastax-3.0.0/cassandra-datastax@3.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/cassandra-datastax-3.8.0-1.0.jar":                                                    "pkg:maven/com.newrelic.instrumentation.cassandra-datastax-3.8.0/cassandra-datastax@3.8.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/cassandra-datastax-4.0.0-1.0.jar":                                                    "pkg:maven/com.newrelic.instrumentation.cassandra-datastax-4.0.0/cassandra-datastax@4.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/cats-effect-2-1.0.jar":                                                               "pkg:maven/com.newrelic.instrumentation.cats-effect-2/cats-effect@2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/cats-effect-3-1.0.jar":                                                               "pkg:maven/com.newrelic.instrumentation.cats-effect-3/cats-effect@3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/cats-effect-3.3.0-1.0.jar":                                                           "pkg:maven/com.newrelic.instrumentation.cats-effect-3.3.0/cats-effect@3.3.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/cxf-2.7-1.0.jar":                                                                     "pkg:maven/com.newrelic.instrumentation.cxf-2.7/cxf@2.7-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/ejb-3.0-1.0.jar":                                                                     "pkg:maven/com.newrelic.instrumentation.ejb-3.0/ejb@3.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/ejb-4.0-1.0.jar":                                                                     "pkg:maven/com.newrelic.instrumentation.ejb-4.0/ejb@4.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/glassfish-3-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.glassfish-3/glassfish@3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/glassfish-6-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.glassfish-6/glassfish@6-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/glassfish-jmx-1.0.jar":                                                               "pkg:maven/com.newrelic.instrumentation.glassfish-jmx/glassfish-jmx@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/grails-1.3-1.0.jar":                                                                  "pkg:maven/com.newrelic.instrumentation.grails-1.3/grails@1.3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/grails-2-1.0.jar":                                                                    "pkg:maven/com.newrelic.instrumentation.grails-2/grails@2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/grails-async-2.3-1.0.jar":                                                            "pkg:maven/com.newrelic.instrumentation.grails-async-2.3/grails-async@2.3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/graphql-java-16.2-1.0.jar":                                                           "pkg:maven/com.graphql-java/graphql-java@16.2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/graphql-java-17.0-1.0.jar":                                                           "pkg:maven/com.graphql-java/graphql-java@17.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/graphql-java-21.0-1.0.jar":                                                           "pkg:maven/com.graphql-java/graphql-java@21.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/grpc-1.22.0-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.grpc-1.22.0/grpc@1.22.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/grpc-1.30.0-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.grpc-1.30.0/grpc@1.30.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/grpc-1.4.0-1.0.jar":                                                                  "pkg:maven/com.newrelic.instrumentation.grpc-1.4.0/grpc@1.4.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/grpc-1.40.0-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.grpc-1.40.0/grpc@1.40.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/hibernate-3.3-1.0.jar":                                                               "pkg:maven/com.newrelic.instrumentation.hibernate-3.3/hibernate@3.3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/hibernate-3.5-1.0.jar":                                                               "pkg:maven/com.newrelic.instrumentation.hibernate-3.5/hibernate@3.5-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/hibernate-4.0-1.0.jar":                                                               "pkg:maven/com.newrelic.instrumentation.hibernate-4.0/hibernate@4.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/hibernate-4.2-1.0.jar":                                                               "pkg:maven/com.newrelic.instrumentation.hibernate-4.2/hibernate@4.2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/hibernate-4.3-1.0.jar":                                                               "pkg:maven/com.newrelic.instrumentation.hibernate-4.3/hibernate@4.3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/http-async-client-4-1.0.jar":                                                         "pkg:maven/com.newrelic.instrumentation.http-async-client-4/http-async-client@4-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/http4s-blaze-client-2.12_0.21-1.0.jar":                                               "pkg:maven/com.newrelic.instrumentation.http4s-blaze-client-2.12_0.21/http4s-blaze-client@2.12_0.21-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/http4s-blaze-client-2.12_0.22-1.0.jar":                                               "pkg:maven/com.newrelic.instrumentation.http4s-blaze-client-2.12_0.22/http4s-blaze-client@2.12_0.22-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/http4s-blaze-client-2.12_0.23-1.0.jar":                                               "pkg:maven/com.newrelic.instrumentation.http4s-blaze-client-2.12_0.23/http4s-blaze-client@2.12_0.23-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/http4s-blaze-client-2.13_0.21-1.0.jar":                                               "pkg:maven/com.newrelic.instrumentation.http4s-blaze-client-2.13_0.21/http4s-blaze-client@2.13_0.21-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/http4s-blaze-client-2.13_0.22-1.0.jar":                                               "pkg:maven/com.newrelic.instrumentation.http4s-blaze-client-2.13_0.22/http4s-blaze-client@2.13_0.22-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/http4s-blaze-client-2.13_0.23-1.0.jar":                                               "pkg:maven/com.newrelic.instrumentation.http4s-blaze-client-2.13_0.23/http4s-blaze-client@2.13_0.23-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/http4s-blaze-server-2.12_0.21-1.0.jar":                                               "pkg:maven/com.newrelic.instrumentation.http4s-blaze-server-2.12_0.21/http4s-blaze-server@2.12_0.21-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/http4s-blaze-server-2.12_0.22-1.0.jar":                                               "pkg:maven/com.newrelic.instrumentation.http4s-blaze-server-2.12_0.22/http4s-blaze-server@2.12_0.22-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/http4s-blaze-server-2.12_0.23-1.0.jar":                                               "pkg:maven/com.newrelic.instrumentation.http4s-blaze-server-2.12_0.23/http4s-blaze-server@2.12_0.23-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/http4s-blaze-server-2.13_0.21-1.0.jar":                                               "pkg:maven/com.newrelic.instrumentation.http4s-blaze-server-2.13_0.21/http4s-blaze-server@2.13_0.21-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/http4s-blaze-server-2.13_0.22-1.0.jar":                                               "pkg:maven/com.newrelic.instrumentation.http4s-blaze-server-2.13_0.22/http4s-blaze-server@2.13_0.22-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/http4s-blaze-server-2.13_0.23-1.0.jar":                                               "pkg:maven/com.newrelic.instrumentation.http4s-blaze-server-2.13_0.23/http4s-blaze-server@2.13_0.23-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/http4s-ember-client-2.12_0.23-1.0.jar":                                               "pkg:maven/com.newrelic.instrumentation.http4s-ember-client-2.12_0.23/http4s-ember-client@2.12_0.23-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/http4s-ember-client-2.13_0.23-1.0.jar":                                               "pkg:maven/com.newrelic.instrumentation.http4s-ember-client-2.13_0.23/http4s-ember-client@2.13_0.23-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/http4s-ember-server-2.12_0.23-1.0.jar":                                               "pkg:maven/com.newrelic.instrumentation.http4s-ember-server-2.12_0.23/http4s-ember-server@2.12_0.23-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/http4s-ember-server-2.13_0.23-1.0.jar":                                               "pkg:maven/com.newrelic.instrumentation.http4s-ember-server-2.13_0.23/http4s-ember-server@2.13_0.23-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/httpclient-3.1-1.0.jar":                                                              "pkg:maven/com.newrelic.instrumentation.httpclient-3.1/httpclient@3.1-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/httpclient-4.0-1.0.jar":                                                              "pkg:maven/com.newrelic.instrumentation.httpclient-4.0/httpclient@4.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/httpclient-5.0-1.0.jar":                                                              "pkg:maven/com.newrelic.instrumentation.httpclient-5.0/httpclient@5.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/httpclient-jdk11-1.0.jar":                                                            "pkg:maven/com.newrelic.instrumentation.httpclient-jdk11/httpclient-jdk11@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/httpurlconnection-1.0.jar":                                                           "pkg:maven/com.newrelic.instrumentation.httpurlconnection/httpurlconnection@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/hystrix-1.3.15-1.0.jar":                                                              "pkg:maven/com.newrelic.instrumentation.hystrix-1.3.15/hystrix@1.3.15-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/hystrix-1.4-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.hystrix-1.4/hystrix@1.4-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jakarta.xml-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.jakarta.xml/xml@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/java-io-1.0.jar":                                                                     "pkg:maven/com.newrelic.instrumentation.java-io/java-io@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/java.completable-future-jdk8-1.0.jar":                                                "pkg:maven/com.newrelic.instrumentation.java.completable-future-jdk8/completable-future-jdk8@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/java.completable-future-jdk8u40-1.0.jar":                                             "pkg:maven/com.newrelic.instrumentation.java.completable-future-jdk8u40/completable-future-jdk8u40@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/java.logging-jdk8-1.0.jar":                                                           "pkg:maven/com.newrelic.instrumentation.java.logging-jdk8/logging-jdk8@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/javax.xml-1.0.jar":                                                                   "pkg:maven/com.newrelic.instrumentation.javax.xml/xml@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jax-rs-1.0-1.0.jar":                                                                  "pkg:maven/com.newrelic.instrumentation.jax-rs-1.0/jax-rs@1.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jax-rs-3.0-1.0.jar":                                                                  "pkg:maven/com.newrelic.instrumentation.jax-rs-3.0/jax-rs@3.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jboss-7-1.0.jar":                                                                     "pkg:maven/com.newrelic.instrumentation.jboss-7/jboss@7-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jboss-jmx-7-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.jboss-jmx-7/jboss-jmx@7-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jboss-logging-1.0.jar":                                                               "pkg:maven/com.newrelic.instrumentation.jboss.logging/jboss-logging@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jcache-1.0.0-1.0.jar":                                                                "pkg:maven/com.newrelic.instrumentation.jcache-1.0.0/jcache@1.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jcache-datastore-1.0.0-1.0.jar":                                                      "pkg:maven/com.newrelic.instrumentation.jcache-datastore-1.0.0/jcache-datastore@1.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-db2-1.0.jar":                                                                    "pkg:maven/com.newrelic.instrumentation.jdbc-db2/jdbc-db2@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-driver-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.jdbc-driver/jdbc-driver@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-embedded-derby-10.11.1.1-1.0.jar":                                               "pkg:maven/com.newrelic.instrumentation.jdbc-embedded-derby-10.11.1.1/jdbc-embedded-derby@10.11.1.1-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-embedded-derby-10.15.1.3-1.0.jar":                                               "pkg:maven/com.newrelic.instrumentation.jdbc-embedded-derby-10.15.1.3/jdbc-embedded-derby@10.15.1.3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-generic-1.0.jar":                                                                "pkg:maven/com.newrelic.instrumentation.jdbc-generic/jdbc-generic@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-h2-1.0.jar":                                                                     "pkg:maven/com.newrelic.instrumentation.jdbc-h2/jdbc-h2@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-hsqldb-1.7.2.2-1.0.jar":                                                         "pkg:maven/com.newrelic.instrumentation.jdbc-hsqldb-1.7.2.2/jdbc-hsqldb@1.7.2.2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-hsqldb-2.2.9-1.0.jar":                                                           "pkg:maven/com.newrelic.instrumentation.jdbc-hsqldb-2.2.9/jdbc-hsqldb@2.2.9-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-inet-merlia-1.0.jar":                                                            "pkg:maven/com.newrelic.instrumentation.jdbc-inet-merlia/jdbc-inet-merlia@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-inet-oranxo-1.0.jar":                                                            "pkg:maven/com.newrelic.instrumentation.jdbc-inet-oranxo/jdbc-inet-oranxo@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-jtds-1.0.jar":                                                                   "pkg:maven/com.newrelic.instrumentation.jdbc-jtds/jdbc-jtds@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-jtds-generic-1.0.jar":                                                           "pkg:maven/com.newrelic.instrumentation.jdbc-jtds-generic/jdbc-jtds-generic@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-mariadb-1.1.7-1.0.jar":                                                          "pkg:maven/com.newrelic.instrumentation.jdbc-mariadb-1.1.7/jdbc-mariadb@1.1.7-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-mariadb-1.3.0-1.0.jar":                                                          "pkg:maven/com.newrelic.instrumentation.jdbc-mariadb-1.3.0/jdbc-mariadb@1.3.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-mysql-3.0.8-1.0.jar":                                                            "pkg:maven/com.newrelic.instrumentation.jdbc-mysql-3.0.8/jdbc-mysql@3.0.8-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-mysql-6.0.2-1.0.jar":                                                            "pkg:maven/com.newrelic.instrumentation.jdbc-mysql-6.0.2/jdbc-mysql@6.0.2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-mysql-8.0.11-1.0.jar":                                                           "pkg:maven/com.newrelic.instrumentation.jdbc-mysql-8.0.11/jdbc-mysql@8.0.11-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-mysql-connection-5.1.4-1.0.jar":                                                 "pkg:maven/com.newrelic.instrumentation.jdbc-mysql-connection-5.1.4/jdbc-mysql-connection@5.1.4-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-mysql-connection-6.0.2-1.0.jar":                                                 "pkg:maven/com.newrelic.instrumentation.jdbc-mysql-connection-6.0.2/jdbc-mysql-connection@6.0.2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-mysql-connection-8.0.11-1.0.jar":                                                "pkg:maven/com.newrelic.instrumentation.jdbc-mysql-connection-8.0.11/jdbc-mysql-connection@8.0.11-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-mysql-multihost-connections-5.1.3-1.0.jar":                                      "pkg:maven/com.newrelic.instrumentation.jdbc-mysql-multihost-connections-5.1.3/jdbc-mysql-multihost-connections@5.1.3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-mysql-multihost-connections-6.0.2-1.0.jar":                                      "pkg:maven/com.newrelic.instrumentation.jdbc-mysql-multihost-connections-6.0.2/jdbc-mysql-multihost-connections@6.0.2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-mysql-multihost-connections-8.0.11-1.0.jar":                                     "pkg:maven/com.newrelic.instrumentation.jdbc-mysql-multihost-connections-8.0.11/jdbc-mysql-multihost-connections@8.0.11-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-ojdbc-1.0.jar":                                                                  "pkg:maven/com.newrelic.instrumentation.jdbc-ojdbc/jdbc-ojdbc@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-ojdbc-tns-1.0.jar":                                                              "pkg:maven/com.newrelic.instrumentation.jdbc-ojdbc-tns/jdbc-ojdbc-tns@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-ojdbc7-12.1.0.2-1.0.jar":                                                        "pkg:maven/com.newrelic.instrumentation.jdbc-ojdbc7-12.1.0.2/jdbc-ojdbc7@12.1.0.2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-ojdbc8-21.1.0.0-1.0.jar":                                                        "pkg:maven/com.newrelic.instrumentation.jdbc-ojdbc8-21.1.0.0/jdbc-ojdbc8@21.1.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-postgresql-8.0-312.jdbc3-1.0.jar":                                               "pkg:maven/com.newrelic.instrumentation.jdbc-postgresql-8.0-312.jdbc3/jdbc-postgresql@8.0-312.jdbc3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-postgresql-9.4.1207-1.0.jar":                                                    "pkg:maven/com.newrelic.instrumentation.jdbc-postgresql-9.4.1207/jdbc-postgresql@9.4.1207-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-postgresql-9.4.1208-1.0.jar":                                                    "pkg:maven/com.newrelic.instrumentation.jdbc-postgresql-9.4.1208/jdbc-postgresql@9.4.1208-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-resultset-1.0.jar":                                                              "pkg:maven/com.newrelic.instrumentation.jdbc-resultset/jdbc-resultset@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-socket-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.jdbc-socket/jdbc-socket@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-socket-jdk21-1.0.jar":                                                           "pkg:maven/com.newrelic.instrumentation.jdbc-socket-jdk21/jdbc-socket-jdk21@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-sqlserver-1.0.jar":                                                              "pkg:maven/com.newrelic.instrumentation.jdbc-sqlserver/jdbc-sqlserver@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jdbc-sybase-6-1.0.jar":                                                               "pkg:maven/com.newrelic.instrumentation.jdbc-sybase-6/jdbc-sybase@6-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jedis-1.4.0-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.jedis-1.4.0/jedis@1.4.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jedis-2.7.1-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.jedis-2.7.1/jedis@2.7.1-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jedis-2.7.2-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.jedis-2.7.2/jedis@2.7.2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jedis-3.0.0-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.jedis-3.0.0/jedis@3.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jedis-4.0.0-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.jedis-4.0.0/jedis@4.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jersey-1-1.0.jar":                                                                    "pkg:maven/com.newrelic.instrumentation.jersey-1/jersey@1-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jersey-2-1.0.jar":                                                                    "pkg:maven/com.newrelic.instrumentation.jersey-2/jersey@2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jersey-3-1.0.jar":                                                                    "pkg:maven/com.newrelic.instrumentation.jersey-3/jersey@3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jersey-client-1-1.0.jar":                                                             "pkg:maven/com.newrelic.instrumentation.jersey-client-1/jersey-client@1-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jersey-client-2-1.0.jar":                                                             "pkg:maven/com.newrelic.instrumentation.jersey-client-2/jersey-client@2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jersey-client-2.26-1.0.jar":                                                          "pkg:maven/com.newrelic.instrumentation.jersey-client-2.26/jersey-client@2.26-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jersey-client-3-1.0.jar":                                                             "pkg:maven/com.newrelic.instrumentation.jersey-client-3/jersey-client@3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jetty-10-1.0.jar":                                                                    "pkg:maven/com.newrelic.instrumentation.jetty-10/jetty@10-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jetty-11-1.0.jar":                                                                    "pkg:maven/com.newrelic.instrumentation.jetty-11/jetty@11-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jetty-12-1.0.jar":                                                                    "pkg:maven/com.newrelic.instrumentation.jetty-12/jetty@12-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jetty-9.3-1.0.jar":                                                                   "pkg:maven/com.newrelic.instrumentation.jetty-9.3/jetty@9.3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jetty-ee10-servlet-12-1.0.jar":                                                       "pkg:maven/com.newrelic.instrumentation.jetty-ee10-servlet-12/jetty-ee10-servlet@12-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jetty-ee10-servlet-12.0.1-1.0.jar":                                                   "pkg:maven/com.newrelic.instrumentation.jetty-ee10-servlet-12.0.1/jetty-ee10-servlet@12.0.1-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jetty-ee8-servlet-12-1.0.jar":                                                        "pkg:maven/com.newrelic.instrumentation.jetty-ee8-servlet-12/jetty-ee8-servlet@12-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jetty-ee9-servlet-12-1.0.jar":                                                        "pkg:maven/com.newrelic.instrumentation.jetty-ee9-servlet-12/jetty-ee9-servlet@12-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jetty-jmx-7-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.jetty-jmx-7/jetty-jmx@7-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jetty-servlet-9-1.0.jar":                                                             "pkg:maven/com.newrelic.instrumentation.jetty-servlet-9/jetty-servlet@9-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jms-1.1-1.0.jar":                                                                     "pkg:maven/com.newrelic.instrumentation.jms-1.1/jms@1.1-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jms-3-1.0.jar":                                                                       "pkg:maven/com.newrelic.instrumentation.jms-3/jms@3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jsp-2.4-1.0.jar":                                                                     "pkg:maven/com.newrelic.instrumentation.jsp-2.4/jsp@2.4-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/jsp-3-1.0.jar":                                                                       "pkg:maven/com.newrelic.instrumentation.jsp-3/jsp@3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/kafka-clients-config-1.1.0-1.0.jar":                                                  "pkg:maven/com.newrelic.instrumentation.kafka-clients-config-1.1.0/kafka-clients-config@1.1.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/kafka-clients-heartbeat-0.10.1.0-1.0.jar":                                            "pkg:maven/com.newrelic.instrumentation.kafka-clients-heartbeat-0.10.1.0/kafka-clients-heartbeat@0.10.1.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/kafka-clients-heartbeat-2.1.0-1.0.jar":                                               "pkg:maven/com.newrelic.instrumentation.kafka-clients-heartbeat-2.1.0/kafka-clients-heartbeat@2.1.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/kafka-clients-metrics-0.10.0.0-1.0.jar":                                              "pkg:maven/com.newrelic.instrumentation.kafka-clients-metrics-0.10.0.0/kafka-clients-metrics@0.10.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/kafka-clients-metrics-2.0.0-1.0.jar":                                                 "pkg:maven/com.newrelic.instrumentation.kafka-clients-metrics-2.0.0/kafka-clients-metrics@2.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/kafka-clients-metrics-3.0.0-1.0.jar":                                                 "pkg:maven/com.newrelic.instrumentation.kafka-clients-metrics-3.0.0/kafka-clients-metrics@3.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/kafka-clients-node-metrics-1.0.0-1.0.jar":                                            "pkg:maven/com.newrelic.instrumentation.kafka-clients-node-metrics-1.0.0/kafka-clients-node-metrics@1.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/kafka-clients-spans-0.11.0.0-1.0.jar":                                                "pkg:maven/com.newrelic.instrumentation.kafka-clients-spans-0.11.0.0/kafka-clients-spans@0.11.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/kafka-connect-metrics-1.0.0-1.0.jar":                                                 "pkg:maven/com.newrelic.instrumentation.kafka-connect-metrics-1.0.0/kafka-connect-metrics@1.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/kafka-connect-spans-2.0.0-1.0.jar":                                                   "pkg:maven/com.newrelic.instrumentation.kafka-connect-spans-2.0.0/kafka-connect-spans@2.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/kafka-connect-spans-3.3.0-1.0.jar":                                                   "pkg:maven/com.newrelic.instrumentation.kafka-connect-spans-3.3.0/kafka-connect-spans@3.3.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/kafka-streams-metrics-1.0.0-1.0.jar":                                                 "pkg:maven/com.newrelic.instrumentation.kafka-streams-metrics-1.0.0/kafka-streams-metrics@1.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/kafka-streams-spans-2.0.0-1.0.jar":                                                   "pkg:maven/com.newrelic.instrumentation.kafka-streams-spans-2.0.0/kafka-streams-spans@2.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/kafka-streams-spans-2.1.0-1.0.jar":                                                   "pkg:maven/com.newrelic.instrumentation.kafka-streams-spans-2.1.0/kafka-streams-spans@2.1.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/kafka-streams-spans-2.6.0-1.0.jar":                                                   "pkg:maven/com.newrelic.instrumentation.kafka-streams-spans-2.6.0/kafka-streams-spans@2.6.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/kafka-streams-spans-3.2.0-1.0.jar":                                                   "pkg:maven/com.newrelic.instrumentation.kafka-streams-spans-3.2.0/kafka-streams-spans@3.2.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/lettuce-4.3-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.lettuce-4.3/lettuce@4.3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/lettuce-5.0-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.lettuce-5.0/lettuce@5.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/lettuce-6.0-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.lettuce-6.0/lettuce@6.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/logback-classic-1.2-1.0.jar":                                                         "pkg:maven/com.newrelic.instrumentation.logback-classic-1.2/logback-classic@1.2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/mongodb-3.1-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.mongodb-3.1/mongodb@3.1-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/mongodb-3.7-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.mongodb-3.7/mongodb@3.7-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/mongodb-async-3.10-1.0.jar":                                                          "pkg:maven/com.newrelic.instrumentation.mongodb-async-3.10/mongodb-async@3.10-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/mongodb-async-3.11-1.0.jar":                                                          "pkg:maven/com.newrelic.instrumentation.mongodb-async-3.11/mongodb-async@3.11-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/mongodb-async-3.4-1.0.jar":                                                           "pkg:maven/com.newrelic.instrumentation.mongodb-async-3.4/mongodb-async@3.4-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/mongodb-async-3.6-1.0.jar":                                                           "pkg:maven/com.newrelic.instrumentation.mongodb-async-3.6/mongodb-async@3.6-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/mongodb-async-3.7-1.0.jar":                                                           "pkg:maven/com.newrelic.instrumentation.mongodb-async-3.7/mongodb-async@3.7-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/mongodb-async-3.8-1.0.jar":                                                           "pkg:maven/com.newrelic.instrumentation.mongodb-async-3.8/mongodb-async@3.8-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/mongodb-async-4.0-1.0.jar":                                                           "pkg:maven/com.newrelic.instrumentation.mongodb-async-4.0/mongodb-async@4.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/mongodb-reactive-streams-4.2-1.0.jar":                                                "pkg:maven/com.newrelic.instrumentation.mongodb-reactive-streams-4.2/mongodb-reactive-streams@4.2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/mongodb-reactive-streams-4.8-1.0.jar":                                                "pkg:maven/com.newrelic.instrumentation.mongodb-reactive-streams-4.8/mongodb-reactive-streams@4.8-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/monix-2.13_3.4.0-1.0.jar":                                                            "pkg:maven/com.newrelic.instrumentation.monix-2.13_3.4.0/monix@2.13_3.4.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/mule-3.6-1.0.jar":                                                                    "pkg:maven/com.newrelic.instrumentation.mule-3.6/mule@3.6-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/mule-3.7-1.0.jar":                                                                    "pkg:maven/com.newrelic.instrumentation.mule-3.7/mule@3.7-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/mule-base-1.0.jar":                                                                   "pkg:maven/com.newrelic.instrumentation.mule-base/mule-base@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/mule-ei1-1.0.jar":                                                                    "pkg:maven/com.newrelic.instrumentation.mule-ei1/mule-ei1@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/mule-ei2-1.0.jar":                                                                    "pkg:maven/com.newrelic.instrumentation.mule-ei2/mule-ei2@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/netty-3.4-1.0.jar":                                                                   "pkg:maven/com.newrelic.instrumentation.netty-3.4/netty@3.4-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/netty-3.8-1.0.jar":                                                                   "pkg:maven/com.newrelic.instrumentation.netty-3.8/netty@3.8-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/netty-4.0.0-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.netty-4.0.0/netty@4.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/netty-4.0.8-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.netty-4.0.8/netty@4.0.8-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/netty-reactor-0.7.0-1.0.jar":                                                         "pkg:maven/com.newrelic.instrumentation.netty-reactor-0.7.0/netty-reactor@0.7.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/netty-reactor-0.8.0-1.0.jar":                                                         "pkg:maven/com.newrelic.instrumentation.netty-reactor-0.8.0/netty-reactor@0.8.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/netty-reactor-0.9.0-1.0.jar":                                                         "pkg:maven/com.newrelic.instrumentation.netty-reactor-0.9.0/netty-reactor@0.9.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/newrelic-cats-effect3-api-1.0.jar":                                                   "pkg:maven/com.newrelic.instrumentation.newrelic-cats-effect3-api/newrelic-cats-effect3-api@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/newrelic-scala-cats-api-1.0.jar":                                                     "pkg:maven/com.newrelic.instrumentation.newrelic-scala-cats-api/newrelic-scala-cats-api@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/newrelic-scala-monix-api-1.0.jar":                                                    "pkg:maven/com.newrelic.instrumentation.scala-monix-api/newrelic-scala-monix-api@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/newrelic-scala-zio-api-1.0.jar":                                                      "pkg:maven/com.newrelic.instrumentation.newrelic-scala-zio-api/newrelic-scala-zio-api@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/ning-async-http-client-1.0-1.0.jar":                                                  "pkg:maven/com.newrelic.instrumentation.ning-async-http-client-1.0/ning-async-http-client@1.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/ning-async-http-client-1.1-1.0.jar":                                                  "pkg:maven/com.newrelic.instrumentation.ning-async-http-client-1.1/ning-async-http-client@1.1-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/ning-async-http-client-1.6.1-1.0.jar":                                                "pkg:maven/com.newrelic.instrumentation.ning-async-http-client-1.6.1/ning-async-http-client@1.6.1-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/okhttp-3.14.0-1.0.jar":                                                               "pkg:maven/com.squareup.okhttp3/okhttp@3.14.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/okhttp-3.6.0-1.0.jar":                                                                "pkg:maven/com.squareup.okhttp3/okhttp@3.6.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/okhttp-4.0.0-1.0.jar":                                                                "pkg:maven/com.squareup.okhttp3/okhttp@4.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/okhttp-4.4.0-1.0.jar":                                                                "pkg:maven/com.squareup.okhttp3/okhttp@4.4.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/open-liberty-jakarta-21.0.0.12-1.0.jar":                                              "pkg:maven/com.newrelic.instrumentation.open-liberty-jakarta-21.0.0.12/open-liberty-jakarta@21.0.0.12-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/openejb-3.0-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.openejb-3.0/openejb@3.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/openjpa-1.0.0-1.0.jar":                                                               "pkg:maven/com.newrelic.instrumentation.openjpa-1.0.0/openjpa@1.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/oracle-r2dbc-1.0.jar":                                                                "pkg:maven/com.newrelic.instrumentation.oracle-r2dbc/oracle-r2dbc@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/play-2.3-1.0.jar":                                                                    "pkg:maven/com.newrelic.instrumentation.play-2.3/play@2.3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/play-2.4-1.0.jar":                                                                    "pkg:maven/com.newrelic.instrumentation.play-2.4/play@2.4-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/play-2.5-1.0.jar":                                                                    "pkg:maven/com.newrelic.instrumentation.play-2.5/play@2.5-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/play-2.6-1.0.jar":                                                                    "pkg:maven/com.newrelic.instrumentation.play-2.6/play@2.6-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/play-2.6.13-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.play-2.6.13/play@2.6.13-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/play-2.7-1.0.jar":                                                                    "pkg:maven/com.newrelic.instrumentation.play-2.7/play@2.7-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/play-2.8.16-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.play-2.8.16/play@2.8.16-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/play-shaded-async-http-client-1.0.0-1.0.jar":                                         "pkg:maven/com.newrelic.instrumentation.play-shaded-async-http-client-1.0.0/play-shaded-async-http-client@1.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/play-ws-2.13_2.6.0-1.0.jar":                                                          "pkg:maven/com.newrelic.instrumentation.play-ws-2.13_2.6.0/play-ws@2.13_2.6.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/play-ws-2.6.0-1.0.jar":                                                               "pkg:maven/com.newrelic.instrumentation.play-ws-2.6.0/play-ws@2.6.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/quartz-1.8.3-1.0.jar":                                                                "pkg:maven/com.newrelic.instrumentation.quartz-1.8.3/quartz@1.8.3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/quartz-2.0.0-1.0.jar":                                                                "pkg:maven/com.newrelic.instrumentation.quartz-2.0.0/quartz@2.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/r2dbc-h2-1.0.jar":                                                                    "pkg:maven/com.newrelic.instrumentation.r2dbc-h2/r2dbc-h2@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/r2dbc-mariadb-1.0.jar":                                                               "pkg:maven/com.newrelic.instrumentation.r2dbc-mariadb/r2dbc-mariadb@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/r2dbc-mssql-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.r2dbc-mssql/r2dbc-mssql@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/r2dbc-mysql-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.r2dbc-mysql/r2dbc-mysql@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/r2dbc-postgresql-0.9.0-1.0.jar":                                                      "pkg:maven/com.newrelic.instrumentation.r2dbc-postgresql-0.9.0/r2dbc-postgresql@0.9.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/r2dbc-postgresql-0.9.2-1.0.jar":                                                      "pkg:maven/com.newrelic.instrumentation.r2dbc-postgresql-0.9.2/r2dbc-postgresql@0.9.2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/rabbit-amqp-2.7-1.0.jar":                                                             "pkg:maven/com.newrelic.instrumentation.rabbit-amqp-2.7/rabbit-amqp@2.7-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/rabbit-amqp-3.5.0-1.0.jar":                                                           "pkg:maven/com.newrelic.instrumentation.rabbit-amqp-3.5.0/rabbit-amqp@3.5.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/rabbit-amqp-5.0.0-1.0.jar":                                                           "pkg:maven/com.newrelic.instrumentation.rabbit-amqp-5.0.0/rabbit-amqp@5.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/reactor-3.3.0-1.0.jar":                                                               "pkg:maven/com.newrelic.instrumentation.reactor-3.3.0/reactor@3.3.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/resin-3-1.0.jar":                                                                     "pkg:maven/com.newrelic.instrumentation.resin-3/resin@3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/resin-4-1.0.jar":                                                                     "pkg:maven/com.newrelic.instrumentation.resin-4/resin@4-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/resin-jmx-1.0.jar":                                                                   "pkg:maven/com.newrelic.instrumentation.resin-jmx/resin-jmx@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/resteasy-2.2-1.0.jar":                                                                "pkg:maven/com.newrelic.instrumentation.resteasy-2.2/resteasy@2.2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/resteasy-3.0-1.0.jar":                                                                "pkg:maven/com.newrelic.instrumentation.resteasy-3.0/resteasy@3.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/scala-2.12.0-1.0.jar":                                                                "pkg:maven/com.newrelic.instrumentation.scala-2.12.0/scala@2.12.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/scala-2.13.0-1.0.jar":                                                                "pkg:maven/com.newrelic.instrumentation.scala-2.13.0/scala@2.13.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/scala-2.9.3-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.scala-2.9.3/scala@2.9.3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/servlet-2.4-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.servlet-2.4/servlet@2.4-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/servlet-5.0-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.servlet-5.0/servlet@5.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/servlet-6.0-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.servlet-6.0/servlet@6.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/servlet-user-1.0.jar":                                                                "pkg:maven/com.newrelic.instrumentation.servlet-user/servlet-user@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/servlet-user-5.0-1.0.jar":                                                            "pkg:maven/com.newrelic.instrumentation.servlet-user-5.0/servlet-user@5.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/slick-2.11_3.2.0-1.0.jar":                                                            "pkg:maven/com.newrelic.instrumentation.slick-2.11_3.2.0/slick@2.11_3.2.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/slick-2.12_3.2.0-1.0.jar":                                                            "pkg:maven/com.newrelic.instrumentation.slick-2.12_3.2.0/slick@2.12_3.2.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/slick-3.0.0-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.slick-3.0.0/slick@3.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/solr-4.0.0-1.0.jar":                                                                  "pkg:maven/com.newrelic.instrumentation.solr-4.0.0/solr@4.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/solr-5.0.0-1.0.jar":                                                                  "pkg:maven/com.newrelic.instrumentation.solr-5.0.0/solr@5.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/solr-5.1.0-1.0.jar":                                                                  "pkg:maven/com.newrelic.instrumentation.solr-5.1.0/solr@5.1.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/solr-5.4.0-1.0.jar":                                                                  "pkg:maven/com.newrelic.instrumentation.solr-5.4.0/solr@5.4.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/solr-6.4.0-1.0.jar":                                                                  "pkg:maven/com.newrelic.instrumentation.solr-6.4.0/solr@6.4.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/solr-7.0.0-1.0.jar":                                                                  "pkg:maven/com.newrelic.instrumentation.solr-7.0.0/solr@7.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/solr-jmx-7.0.0-1.0.jar":                                                              "pkg:maven/com.newrelic.instrumentation.solr-jmx-7.0.0/solr-jmx@7.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/solr-jmx-7.4.0-1.0.jar":                                                              "pkg:maven/com.newrelic.instrumentation.solr-jmx-7.4.0/solr-jmx@7.4.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/spray-can-1.3.1-1.0.jar":                                                             "pkg:maven/com.newrelic.instrumentation.spray-can-1.3.1/spray-can@1.3.1-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/spray-can-http-client-1.3.1-1.0.jar":                                                 "pkg:maven/com.newrelic.instrumentation.spray-can-http-client-1.3.1/spray-can-http-client@1.3.1-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/spray-client-1.3.1-1.0.jar":                                                          "pkg:maven/com.newrelic.instrumentation.spray-client-1.3.1/spray-client@1.3.1-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/spray-http-1.3.1-1.0.jar":                                                            "pkg:maven/com.newrelic.instrumentation.spray-http-1.3.1/spray-http@1.3.1-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/spring-3.0.0-1.0.jar":                                                                "pkg:maven/org.springframework/spring@3.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/spring-4.0.0-1.0.jar":                                                                "pkg:maven/org.springframework/spring@4.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/spring-4.2.0-1.0.jar":                                                                "pkg:maven/org.springframework/spring@4.2.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/spring-4.3.0-1.0.jar":                                                                "pkg:maven/org.springframework/spring@4.3.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/spring-aop-2-1.0.jar":                                                                "pkg:maven/org.springframework/spring-aop@2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/spring-cache-3.1.0-1.0.jar":                                                          "pkg:maven/com.newrelic.instrumentation.spring-cache-3.1.0/spring-cache@3.1.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/spring-jms-2-1.0.jar":                                                                "pkg:maven/org.springframework/spring-jms@2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/spring-jms-3-1.0.jar":                                                                "pkg:maven/org.springframework/spring-jms@3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/spring-webclient-5.0-1.0.jar":                                                        "pkg:maven/com.newrelic.instrumentation.spring-webclient-5.0/spring-webclient@5.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/spring-webflux-5.0.0-1.0.jar":                                                        "pkg:maven/org.springframework/spring-webflux@5.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/spring-webflux-5.1.0-1.0.jar":                                                        "pkg:maven/org.springframework/spring-webflux@5.1.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/spring-webflux-5.3.0-1.0.jar":                                                        "pkg:maven/org.springframework/spring-webflux@5.3.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/spring-webflux-6.0.0-1.0.jar":                                                        "pkg:maven/org.springframework/spring-webflux@6.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/spring-ws-2.0-1.0.jar":                                                               "pkg:maven/org.springframework.ws/spring-ws@2.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/spymemcached-2.12.0-1.0.jar":                                                         "pkg:maven/com.newrelic/spymemcached@2.12.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/sttp-2.12_2.2.3-1.0.jar":                                                             "pkg:maven/com.newrelic.instrumentation.sttp-2.12_2.2.3/sttp@2.12_2.2.3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/sttp-2.13_2.2.3-1.0.jar":                                                             "pkg:maven/com.newrelic.instrumentation.sttp-2.13_2.2.3/sttp@2.13_2.2.3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/sttp-2.13_3.0.0-1.0.jar":                                                             "pkg:maven/com.newrelic.instrumentation.sttp-2.13_3.0.0/sttp@2.13_3.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/sttp-akka-2.12_2.1.5-1.0.jar":                                                        "pkg:maven/com.newrelic.instrumentation.sttp-akka-2.12_2.1.5/sttp-akka@2.12_2.1.5-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/sttp-akka-2.13_2.1.5-1.0.jar":                                                        "pkg:maven/com.newrelic.instrumentation.sttp-akka-2.13_2.1.5/sttp-akka@2.13_2.1.5-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/sttp-akka-2.13_3.0.0-1.0.jar":                                                        "pkg:maven/com.newrelic.instrumentation.sttp-akka-2.13_3.0.0/sttp-akka@2.13_3.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/sttp-http4s-2.12_2.1.5-1.0.jar":                                                      "pkg:maven/com.newrelic.instrumentation.sttp-http4s-2.12_2.1.5/sttp-http4s@2.12_2.1.5-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/sttp-http4s-2.13_2.1.5-1.0.jar":                                                      "pkg:maven/com.newrelic.instrumentation.sttp-http4s-2.13_2.1.5/sttp-http4s@2.13_2.1.5-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/sttp-http4s-2.13_3.3.0-1.0.jar":                                                      "pkg:maven/com.newrelic.instrumentation.sttp-http4s-2.13_3.3.0/sttp-http4s@2.13_3.3.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/sun-net-httpserver-1.0.jar":                                                          "pkg:maven/com.newrelic.instrumentation.sun-net-httpserver/sun-net-httpserver@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/thrift-0.8-1.0.jar":                                                                  "pkg:maven/com.newrelic.instrumentation.thrift-0.8/thrift@0.8-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/tomcat-10-1.0.jar":                                                                   "pkg:maven/org.apache.tomcat/tomcat@10-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/tomcat-7-1.0.jar":                                                                    "pkg:maven/org.apache.tomcat/tomcat@7-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/tomcat-7.0.70-1.0.jar":                                                               "pkg:maven/org.apache.tomcat/tomcat@7.0.70-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/tomcat-8.5.0-1.0.jar":                                                                "pkg:maven/org.apache.tomcat/tomcat@8.5.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/tomcat-8.5.2-1.0.jar":                                                                "pkg:maven/org.apache.tomcat/tomcat@8.5.2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/tomcat-jmx-1.0.jar":                                                                  "pkg:maven/com.newrelic.instrumentation.tomcat-jmx/tomcat-jmx@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/tomcat-request-listener-1.0.jar":                                                     "pkg:maven/com.newrelic.instrumentation.tomcat-request-listener/tomcat-request-listener@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/tomcat-request-listener-10-1.0.jar":                                                  "pkg:maven/com.newrelic.instrumentation.tomcat-request-listener-10/tomcat-request-listener@10-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/vertx-core-3.3.0-1.0.jar":                                                            "pkg:maven/com.newrelic.instrumentation.vertx-core-3.3.0/vertx-core@3.3.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/vertx-core-3.3.3-1.0.jar":                                                            "pkg:maven/com.newrelic.instrumentation.vertx-core-3.3.3/vertx-core@3.3.3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/vertx-core-3.4.1-1.0.jar":                                                            "pkg:maven/com.newrelic.instrumentation.vertx-core-3.4.1/vertx-core@3.4.1-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/vertx-core-3.6.0-1.0.jar":                                                            "pkg:maven/com.newrelic.instrumentation.vertx-core-3.6.0/vertx-core@3.6.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/vertx-core-3.8.0-1.0.jar":                                                            "pkg:maven/com.newrelic.instrumentation.vertx-core-3.8.0/vertx-core@3.8.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/vertx-core-3.9.0-1.0.jar":                                                            "pkg:maven/com.newrelic.instrumentation.vertx-core-3.9.0/vertx-core@3.9.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/vertx-core-4.0.0-1.0.jar":                                                            "pkg:maven/com.newrelic.instrumentation.vertx-core-4.0.0/vertx-core@4.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/vertx-core-4.1.0-1.0.jar":                                                            "pkg:maven/com.newrelic.instrumentation.vertx-core-4.1.0/vertx-core@4.1.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/vertx-core-4.3.2-1.0.jar":                                                            "pkg:maven/com.newrelic.instrumentation.vertx-core-4.3.2/vertx-core@4.3.2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/vertx-web-3.2.0-1.0.jar":                                                             "pkg:maven/com.newrelic.instrumentation.vertx-web-3.2.0/vertx-web@3.2.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/vertx-web-3.3.0-1.0.jar":                                                             "pkg:maven/com.newrelic.instrumentation.vertx-web-3.3.0/vertx-web@3.3.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/vertx-web-3.5.0-1.0.jar":                                                             "pkg:maven/com.newrelic.instrumentation.vertx-web-3.5.0/vertx-web@3.5.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/vertx-web-3.5.1-1.0.jar":                                                             "pkg:maven/com.newrelic.instrumentation.vertx-web-3.5.1/vertx-web@3.5.1-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/vertx-web-3.5.2-1.0.jar":                                                             "pkg:maven/com.newrelic.instrumentation.vertx-web-3.5.2/vertx-web@3.5.2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/vertx-web-3.6.0-1.0.jar":                                                             "pkg:maven/com.newrelic.instrumentation.vertx-web-3.6.0/vertx-web@3.6.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/vertx-web-3.8.0-1.0.jar":                                                             "pkg:maven/com.newrelic.instrumentation.vertx-web-3.8.0/vertx-web@3.8.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/vertx-web-3.8.3-1.0.jar":                                                             "pkg:maven/com.newrelic.instrumentation.vertx-web-3.8.3/vertx-web@3.8.3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/weblogic-12-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.weblogic-12/weblogic@12-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/weblogic-12.2-1.0.jar":                                                               "pkg:maven/com.newrelic.instrumentation.weblogic-12.2/weblogic@12.2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/weblogic-jmx-12-1.0.jar":                                                             "pkg:maven/com.newrelic.instrumentation.weblogic-jmx-12/weblogic-jmx@12-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/weblogic-jmx-12.2.1-1.0.jar":                                                         "pkg:maven/com.newrelic.instrumentation.weblogic-jmx-12.2.1/weblogic-jmx@12.2.1-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/websphere-8-1.0.jar":                                                                 "pkg:maven/com.newrelic.instrumentation.websphere-8/websphere@8-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/websphere-jmx-7-1.0.jar":                                                             "pkg:maven/com.newrelic.instrumentation.websphere-jmx-7/websphere-jmx@7-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/websphere-liberty-profile-8.5.5.5-1.0.jar":                                           "pkg:maven/com.newrelic.instrumentation.websphere-liberty-profile-8.5.5.5/websphere-liberty-profile@8.5.5.5-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/websphere-liberty-profile-dispatcher-8.5.5.5-1.0.jar":                                "pkg:maven/com.newrelic.instrumentation.websphere-liberty-profile-dispatcher-8.5.5.5/websphere-liberty-profile-dispatcher@8.5.5.5-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/websphere-liberty-profile-environment-8.5.5.5-1.0.jar":                               "pkg:maven/com.newrelic.instrumentation.websphere-liberty-profile-environment-8.5.5.5/websphere-liberty-profile-environment@8.5.5.5-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/wildfly-27-1.0.jar":                                                                  "pkg:maven/com.newrelic.instrumentation.wildfly-27/wildfly@27-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/wildfly-8-1.0.jar":                                                                   "pkg:maven/com.newrelic.instrumentation.wildfly-8/wildfly@8-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/wildfly-8-CAT-1.0.jar":                                                               "pkg:maven/com.newrelic.instrumentation.wildfly-8-CAT/wildfly@8-CAT-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/wildfly-8-PORT-1.0.jar":                                                              "pkg:maven/com.newrelic.instrumentation.wildfly-8-PORT/wildfly@8-PORT-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/wildfly-jmx-14-1.0.jar":                                                              "pkg:maven/com.newrelic.instrumentation.wildfly-jmx-14/wildfly-jmx@14-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:instrumentation/zio-1.0.jar":                                                                         "pkg:maven/com.newrelic.instrumentation.zio/zio@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-api.jar":                                                                                    "pkg:maven/newrelic-api/newrelic-api@8.8.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/akka-http-core-10.0-1.0.jar":                    "pkg:maven/com.newrelic.instrumentation.security.akka-http-core-10.0/akka-http-core@10.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/akka-http-core-2.11_10.0.11-1.0.jar":            "pkg:maven/com.newrelic.instrumentation.security.akka-http-core-10.0.11/akka-http-core@2.11_10.0.11-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/apache-ldap-1.0.jar":                            "pkg:maven/com.newrelic.instrumentation.security.apache-ldap/apache-ldap@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/apache-log4j-2.0-1.0.jar":                       "pkg:maven/com.newrelic.instrumentation.security.apache-log4j-2.0/apache-log4j@2.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/apache-log4j-2.17.2-1.0.jar":                    "pkg:maven/com.newrelic.instrumentation.security.apache-log4j/apache-log4j@2.17.2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/apache-log4j-3.0.0-1.0.jar":                     "pkg:maven/com.newrelic.instrumentation.security.apache-log4j/apache-log4j@3.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/async-http-client-2.0.0-1.0.jar":                "pkg:maven/com.newrelic.instrumentation.security.async-http-client-2.0.0/async-http-client@2.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/camel-xpath-1.0.jar":                            "pkg:maven/com.newrelic.instrumentation.security.camel-xpath/camel-xpath@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/cassandra-datastax-3-1.0.jar":                   "pkg:maven/com.newrelic.instrumentation.security.cassandra-datastax-3/cassandra-datastax@3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/cassandra-datastax-4-1.0.jar":                   "pkg:maven/com.newrelic.instrumentation.security.cassandra-datastax-4/cassandra-datastax@4-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/commons-jxpath-1.0.jar":                         "pkg:maven/com.newrelic.instrumentation.security.commons-jxpath/commons-jxpath@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/dynamodb-1.11.390-1.0.jar":                      "pkg:maven/com.newrelic.instrumentation.security.dynamodb-1.11.390/dynamodb@1.11.390-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/dynamodb-1.11.453-1.0.jar":                      "pkg:maven/com.newrelic.instrumentation.security.dynamodb-1.11.453/dynamodb@1.11.453-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/dynamodb-1.11.459-1.0.jar":                      "pkg:maven/com.newrelic.instrumentation.security.dynamodb-1.11.459/dynamodb@1.11.459-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/dynamodb-1.11.80-1.0.jar":                       "pkg:maven/com.newrelic.instrumentation.security.dynamodb-1.11.80/dynamodb@1.11.80-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/dynamodb-2.1.0-1.0.jar":                         "pkg:maven/com.newrelic.instrumentation.security.dynamodb-2.1.0/dynamodb@2.1.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/dynamodb-2.1.2-1.0.jar":                         "pkg:maven/com.newrelic.instrumentation.security.dynamodb-2.1.2/dynamodb@2.1.2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/dynamodb-2.15.34-1.0.jar":                       "pkg:maven/com.newrelic.instrumentation.security.dynamodb-2.15.34/dynamodb@2.15.34-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/file-operation-1.0.jar":                         "pkg:maven/com.newrelic.instrumentation.security.file-operation/file-operation@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/graalvm-jsinjection-19.0.0-1.0.jar":             "pkg:maven/com.newrelic.instrumentation.security.graalvm-jsinjection-19.0.0/graalvm-jsinjection@19.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/graalvm-jsinjection-22.0.0-1.0.jar":             "pkg:maven/com.newrelic.instrumentation.security.graalvm-jsinjection-22.0.0/graalvm-jsinjection@22.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/http-async-client-4-1.0.jar":                    "pkg:maven/com.newrelic.instrumentation.security.http-async-client-4/http-async-client@4-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/httpclient-3-1.0.jar":                           "pkg:maven/com.newrelic.instrumentation.security.httpclient-3/httpclient@3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/httpclient-4.0-1.0.jar":                         "pkg:maven/com.newrelic.instrumentation.security.httpclient-4.0/httpclient@4.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/httpclient-5.0-1.0.jar":                         "pkg:maven/com.newrelic.instrumentation.security.httpclient-5.0/httpclient@5.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/httpclient-jdk11-1.0.jar":                       "pkg:maven/com.newrelic.instrumentation.security.httpclient-jdk11/httpclient-jdk11@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/java-io-inputstream-jdk8-1.0.jar":               "pkg:maven/com.newrelic.instrumentation.security.java-io-inputstream-jdk8/java-io-inputstream-jdk8@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/java-io-inputstream-jdk9-1.0.jar":               "pkg:maven/com.newrelic.instrumentation.security.java-io-inputstream-jdk9/java-io-inputstream-jdk9@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/java-io-stream-1.0.jar":                         "pkg:maven/com.newrelic.instrumentation.security.java-io-stream/java-io-stream@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/java-lang-1.0.jar":                              "pkg:maven/com.newrelic.instrumentation.security.java-lang/java-lang@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/javax-jndi-1.0.jar":                             "pkg:maven/com.newrelic.instrumentation.security.javax-jndi/javax-jndi@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/javax-ldap-1.0.jar":                             "pkg:maven/com.newrelic.instrumentation.security.javax-ldap/javax-ldap@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/javax-xpath-1.0.jar":                            "pkg:maven/com.newrelic.instrumentation.security.javax-xpath/javax-xpath@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jax-rs-1.0-1.0.jar":                             "pkg:maven/com.newrelic.instrumentation.security.jax-rs-1.0/jax-rs@1.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jax-rs-3.0-1.0.jar":                             "pkg:maven/com.newrelic.instrumentation.security.jax-rs-3.0/jax-rs@3.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jaxen-xpath-1.0.jar":                            "pkg:maven/com.newrelic.instrumentation.security.jaxen-xpath/jaxen-xpath@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jaxen-xpath-1.1-1.0.jar":                        "pkg:maven/com.newrelic.instrumentation.security.jaxen-xpath-1.1/jaxen-xpath@1.1-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-db2-1.0.jar":                               "pkg:maven/com.newrelic.instrumentation.security.jdbc-db2/jdbc-db2@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-embedded-derby-10.10.1.1-1.0.jar":          "pkg:maven/com.newrelic.instrumentation.security.jdbc-embedded-derby-10.10.1.1/jdbc-embedded-derby@10.10.1.1-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-embedded-derby-10.11.1.1-1.0.jar":          "pkg:maven/com.newrelic.instrumentation.security.jdbc-embedded-derby-10.11.1.1/jdbc-embedded-derby@10.11.1.1-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-embedded-derby-10.15.1.3-1.0.jar":          "pkg:maven/com.newrelic.instrumentation.security.jdbc-embedded-derby-10.15.1.3/jdbc-embedded-derby@10.15.1.3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-embedded-derby-10.2.1.6-1.0.jar":           "pkg:maven/com.newrelic.instrumentation.security.jdbc-embedded-derby-10.2.1.6/jdbc-embedded-derby@10.2.1.6-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-generic-1.0.jar":                           "pkg:maven/com.newrelic.instrumentation.security.jdbc-generic/jdbc-generic@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-h2-1.0.jar":                                "pkg:maven/com.newrelic.instrumentation.security.jdbc-h2/jdbc-h2@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-hsqldb-1.7.2.2-1.0.jar":                    "pkg:maven/com.newrelic.instrumentation.security.jdbc-hsqldb-1.7.2.2/jdbc-hsqldb@1.7.2.2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-hsqldb-2.2.9-1.0.jar":                      "pkg:maven/com.newrelic.instrumentation.security.jdbc-hsqldb-2.2.9/jdbc-hsqldb@2.2.9-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-inet-merlia-1.0.jar":                       "pkg:maven/com.newrelic.instrumentation.security.jdbc-inet-merlia/jdbc-inet-merlia@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-inet-oranxo-1.0.jar":                       "pkg:maven/com.newrelic.instrumentation.security.jdbc-inet-merlia/jdbc-inet-oranxo@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-jtds-generic-1.0.jar":                      "pkg:maven/com.newrelic.instrumentation.security.jdbc-jtds-generic/jdbc-jtds-generic@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-mariadb-1.1.7-1.0.jar":                     "pkg:maven/com.newrelic.instrumentation.security.jdbc-mariadb-1.1.7/jdbc-mariadb@1.1.7-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-mariadb-1.3.0-1.0.jar":                     "pkg:maven/com.newrelic.instrumentation.security.jdbc-mariadb-1.3.0/jdbc-mariadb@1.3.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-mysql-3.0.8-1.0.jar":                       "pkg:maven/com.newrelic.instrumentation.security.jdbc-mysql-3.0.8/jdbc-mysql@3.0.8-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-mysql-6.0.2-1.0.jar":                       "pkg:maven/com.newrelic.instrumentation.security.jdbc-mysql-6.0.2/jdbc-mysql@6.0.2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-mysql-6.0.4-1.0.jar":                       "pkg:maven/com.newrelic.instrumentation.security.jdbc-mysql-6.0.4/jdbc-mysql@6.0.4-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-mysql-8.0.11-1.0.jar":                      "pkg:maven/com.newrelic.instrumentation.security.jdbc-mysql-8.0.11/jdbc-mysql@8.0.11-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-mysql-connection-5.1.4-1.0.jar":            "pkg:maven/com.newrelic.instrumentation.security.jdbc-mysql-connection-5.1.4/jdbc-mysql-connection@5.1.4-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-mysql-connection-6.0.2-1.0.jar":            "pkg:maven/com.newrelic.instrumentation.security.jdbc-mysql-connection-6.0.2/jdbc-mysql-connection@6.0.2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-mysql-connection-8.0.11-1.0.jar":           "pkg:maven/com.newrelic.instrumentation.security.jdbc-mysql-connection-8.0.11/jdbc-mysql-connection@8.0.11-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-mysql-multihost-connections-5.1.3-1.0.jar": "pkg:maven/com.newrelic.instrumentation.jdbc-mysql-multihost-connections-5.1.3/jdbc-mysql-multihost-connections@5.1.3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-mysql-multihost-connections-6.0.2-1.0.jar": "pkg:maven/com.newrelic.instrumentation.jdbc-mysql-multihost-connections-6.0.2/jdbc-mysql-multihost-connections@6.0.2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-ojdbc-tns-12.1.0.2-1.0.jar":                "pkg:maven/com.newrelic.instrumentation.security.jdbc-ojdbc-tns/jdbc-ojdbc-tns@12.1.0.2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-ojdbc-tns-21.1.0.0-1.0.jar":                "pkg:maven/com.newrelic.instrumentation.security.jdbc-ojdbc-tns-21.1.0.0/jdbc-ojdbc-tns@21.1.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-ojdbc-tns-21.6.0.0-1.0.jar":                "pkg:maven/com.newrelic.instrumentation.security.jdbc-ojdbc-tns-21.6.0.0/jdbc-ojdbc-tns@21.6.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-ojdbc7-12.1.0.2-1.0.jar":                   "pkg:maven/com.newrelic.instrumentation.security.jdbc-ojdbc7-12.1.0.2/jdbc-ojdbc7@12.1.0.2-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-ojdbc8-21.1.0.0-1.0.jar":                   "pkg:maven/com.newrelic.instrumentation.security.jdbc-ojdbc8-21.1.0.0/jdbc-ojdbc8@21.1.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-postgresql-8.0-312.jdbc3-1.0.jar":          "pkg:maven/com.newrelic.instrumentation.security.jdbc-postgresql-8.0-312.jdbc3/jdbc-postgresql@8.0-312.jdbc3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-postgresql-9.4.1207-1.0.jar":               "pkg:maven/com.newrelic.instrumentation.security.jdbc-postgresql-9.4.1207/jdbc-postgresql@9.4.1207-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-postgresql-9.4.1208-1.0.jar":               "pkg:maven/com.newrelic.instrumentation.security.jdbc-postgresql-9.4.1208/jdbc-postgresql@9.4.1208-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-sqlserver-1.0.jar":                         "pkg:maven/com.newrelic.instrumentation.security.jdbc-sqlserver/jdbc-sqlserver@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jdbc-sybase-6-1.0.jar":                          "pkg:maven/com.newrelic.instrumentation.security.jdbc-sybase-6/jdbc-sybase@6-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jetty-11-1.0.jar":                               "pkg:maven/com.newrelic.instrumentation.security.jetty-11/jetty@11-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jetty-9-1.0.jar":                                "pkg:maven/com.newrelic.instrumentation.security.jetty-9/jetty@9-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jsp-2.4-1.0.jar":                                "pkg:maven/com.newrelic.instrumentation.security.jsp-2.4/jsp@2.4-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/jsp-3-1.0.jar":                                  "pkg:maven/com.newrelic.instrumentation.security.jsp-3/jsp@3-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/ldaptive-1.0-1.0.jar":                           "pkg:maven/com.newrelic.instrumentation.security.ldaptive-1.0/ldaptive@1.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/ldaptive-2.0-1.0.jar":                           "pkg:maven/com.newrelic.instrumentation.security.ldaptive-2.0/ldaptive@2.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/low-priority-instrumentation-1.0.jar":           "pkg:maven/com.newrelic.instrumentation.security.low-priority-instrumentation/low-priority-instrumentation@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/mongodb-3.0-1.0.jar":                            "pkg:maven/com.newrelic.instrumentation.security.mongodb-3.0/mongodb@3.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/mongodb-3.6-1.0.jar":                            "pkg:maven/com.newrelic.instrumentation.security.mongodb-3.6/mongodb@3.6-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/mongodb-3.7-1.0.jar":                            "pkg:maven/com.newrelic.instrumentation.security.mongodb-3.7/mongodb@3.7-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/mongodb-3.8-1.0.jar":                            "pkg:maven/com.newrelic.instrumentation.security.mongodb-3.8/mongodb@3.8-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/nashorn-jsinjection-1.0.jar":                    "pkg:maven/com.newrelic.instrumentation.security.nashorn-jsinjection/nashorn-jsinjection@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/okhttp-3.0.0-1.0.jar":                           "pkg:maven/com.squareup.okhttp3/okhttp@3.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/okhttp-3.5.0-1.0.jar":                           "pkg:maven/com.squareup.okhttp3/okhttp@3.5.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/okhttp-4.0.0-1.0.jar":                           "pkg:maven/com.squareup.okhttp3/okhttp@4.0.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/r2dbc-generic-1.0.jar":                          "pkg:maven/com.newrelic.instrumentation.security.r2dbc-generic/r2dbc-generic@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/r2dbc-h2-1.0.jar":                               "pkg:maven/com.newrelic.instrumentation.security.r2dbc-h2/r2dbc-h2@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/r2dbc-mariadb-1.0.jar":                          "pkg:maven/com.newrelic.instrumentation.security.r2dbc-mariadb/r2dbc-mariadb@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/r2dbc-mssql-1.0.jar":                            "pkg:maven/com.newrelic.instrumentation.security.r2dbc-mssql/r2dbc-mssql@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/r2dbc-mysql-1.0.jar":                            "pkg:maven/com.newrelic.instrumentation.security.r2dbc-mysql/r2dbc-mysql@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/r2dbc-oracle-1.0.jar":                           "pkg:maven/com.newrelic.instrumentation.security.r2dbc-oracle/r2dbc-oracle@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/r2dbc-postgresql-1.0.jar":                       "pkg:maven/com.newrelic.instrumentation.security.r2dbc-postgresql/r2dbc-postgresql@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/rhino-jsinjection-1.0.jar":                      "pkg:maven/com.newrelic.instrumentation.security.rhino-jsinjection/rhino-jsinjection@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/saxpath-1.0.jar":                                "pkg:maven/com.newrelic.instrumentation.security.saxpath/saxpath@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/servlet-2.4-1.0.jar":                            "pkg:maven/com.newrelic.instrumentation.security.servlet-2.4/servlet@2.4-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/servlet-5.0-1.0.jar":                            "pkg:maven/com.newrelic.instrumentation.security.servlet-5.0/servlet@5.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/servlet-6.0-1.0.jar":                            "pkg:maven/com.newrelic.instrumentation.security.servlet-6.0/servlet@6.0-1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/spring-web-1.0.jar":                             "pkg:maven/org.springframework/spring-web@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/sun-net-httpserver-1.0.jar":                     "pkg:maven/com.newrelic.instrumentation.security.sun-net-httpserver/sun-net-httpserver@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/unboundid-ldapsdk-1.0.jar":                      "pkg:maven/com.newrelic.instrumentation.security.unboundid-ldapsdk/unboundid-ldapsdk@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/urlconnection-1.0.jar":                          "pkg:maven/com.newrelic.instrumentation.security.urlconnection/urlconnection@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar:instrumentation-security/xalan-xpath-1.0.jar":                            "pkg:maven/com.newrelic.instrumentation.security.xalan-xpath/xalan-xpath@1.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-agent.jar":                                                                         "pkg:maven/com.newrelic.agent.java.security/newrelic-security-agent@1.0.7-public-preview",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-security-api.jar":                                                                           "pkg:maven/com.newrelic.agent.java.security/newrelic-security-api@1.0.7-public-preview",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-weaver-api.jar":                                                                             "pkg:maven/com.newrelic.agent.java/newrelic-weaver-api@8.8.0",
+	"/packages/newrelic-agent-8.8.0.jar:newrelic-weaver-scala-api.jar":                                                                       "pkg:maven/com.newrelic.agent.java/newrelic-weaver-scala-api@8.8.0",
+	"/packages/newrelic-agent-8.8.0.jar":                                                                                                     "pkg:maven/com.newrelic.agent.java/newrelic-agent@8.8.0",
 }

 // Constructed by:
 // syft anchore/test_images:java-1abc58f -o json | jq -r '.artifacts.[] | [.metadata.virtualPath, .purl, ""] | @csv' | grep 'pkg:maven' | sort | uniq >> /tmp/java_artifacts_mapping.txt
 // The map was then hand-edited for correctness by comparing to Maven Central.
 var expectedPURLs = map[string]string{
-	"/packages/activemq-client-5.18.2.jar": "pkg:maven/org.apache.activemq/activemq-client@5.18.2",
-	"/packages/activemq-protobuf-1.1.jar":  "pkg:maven/org.apache.activemq.protobuf/activemq-protobuf@1.1",
-	// "/packages/akka-actor_2.13-2.6.6.jar":                                                                                                  "pkg:maven/com.typesafe.akka/akka-actor_2.13@2.6.6",
-	// "/packages/akka-management-cluster-bootstrap_2.13-1.2.0.jar":                                                                           "pkg:maven/com.lightbend.akka.management/akka-management-cluster-bootstrap_2.13@1.2.0",
-	"/packages/ant-1.10.3.jar":                           "pkg:maven/org.apache.ant/ant@1.10.3",
-	"/packages/apache-chainsaw-2.1.0.jar":                "pkg:maven/log4j/apache-chainsaw@2.1.0",
-	"/packages/apache-log4j-extras-1.1.jar":              "pkg:maven/log4j/apache-log4j-extras@1.1",
-	"/packages/apoc-4.4.0.11.jar":                        "pkg:maven/org.neo4j.procedure/apoc@4.4.0.11",
-	"/packages/bc-fips-1.0.2.3.jar":                      "pkg:maven/org.bouncycastle/bc-fips@1.0.2.3",
-	"/packages/camel-core-3.1.0.jar":                     "pkg:maven/org.apache.camel/camel-core@3.1.0",
-	"/packages/cassandra-all-4.1.1.jar":                  "pkg:maven/org.apache.cassandra/cassandra-all@4.1.1",
-	"/packages/commons-logging-1.1.1.jar":                "pkg:maven/commons-logging/commons-logging@1.1.1",
-	"/packages/commons-vfs-1.0.jar":                      "pkg:maven/commons-vfs/commons-vfs@1.0",
-	"/packages/cxf-rt-transports-http-2.7.3.jar":         "pkg:maven/org.apache.cxf/cxf-rt-transports-http@2.7.3",
-	"/packages/dubbo-3.1.4.jar:com.alibaba:hessian-lite": "pkg:maven/com.alibaba/hessian-lite@3.2.13",
+	"/packages/activemq-client-5.18.2.jar":                       "pkg:maven/org.apache.activemq/activemq-client@5.18.2",
+	"/packages/activemq-protobuf-1.1.jar":                        "pkg:maven/org.apache.activemq.protobuf/activemq-protobuf@1.1",
+	"/packages/akka-actor_2.13-2.6.6.jar":                        "pkg:maven/com.typesafe.akka/akka-actor_2.13@2.6.6",
+	"/packages/akka-management-cluster-bootstrap_2.13-1.2.0.jar": "pkg:maven/com.lightbend.akka.management/akka-management-cluster-bootstrap_2.13@1.2.0",
+	"/packages/ant-1.10.3.jar":                                   "pkg:maven/org.apache.ant/ant@1.10.3",
+	"/packages/apache-chainsaw-2.1.0.jar":                        "pkg:maven/log4j/apache-chainsaw@2.1.0",
+	"/packages/apache-log4j-extras-1.1.jar":                      "pkg:maven/log4j/apache-log4j-extras@1.1",
+	"/packages/apoc-4.4.0.11.jar":                                "pkg:maven/org.neo4j.procedure/apoc@4.4.0.11",
+	"/packages/bc-fips-1.0.2.3.jar":                              "pkg:maven/org.bouncycastle/bc-fips@1.0.2.3",
+	"/packages/camel-core-3.1.0.jar":                             "pkg:maven/org.apache.camel/camel-core@3.1.0",
+	"/packages/cassandra-all-4.1.1.jar":                          "pkg:maven/org.apache.cassandra/cassandra-all@4.1.1",
+	"/packages/commons-logging-1.1.1.jar":                        "pkg:maven/commons-logging/commons-logging@1.1.1",
+	"/packages/commons-vfs-1.0.jar":                              "pkg:maven/commons-vfs/commons-vfs@1.0",
+	"/packages/cxf-rt-transports-http-2.7.3.jar":                 "pkg:maven/org.apache.cxf/cxf-rt-transports-http@2.7.3",
+	"/packages/dubbo-3.1.4.jar:com.alibaba:hessian-lite":         "pkg:maven/com.alibaba/hessian-lite@3.2.13",
 	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-auth":                         "pkg:maven/org.apache.dubbo/dubbo-auth@3.1.4",
 	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-cluster":                      "pkg:maven/org.apache.dubbo/dubbo-cluster@3.1.4",
 	// "/packages/dubbo-3.1.4.jar:org.apache.dubbo:dubbo-common":                       "pkg:maven/org.apache.dubbo/dubbo-common@3.1.4",
@@ -1 +1 @@
-FROM anchore/test_images:java-1abc58f@sha256:3add9f90e9ed35739cc99b7830767e09eec921052e2412adf4491648c741f066
+FROM anchore/test_images:java-6ec7f71@sha256:e68db8ae97cc84b5b58f7bea0c138e00440aea188d74a2f4a2c2f6402e57d3a9
@@ -29,12 +29,12 @@ require (
 	github.com/dave/jennifer v1.7.0
 	github.com/deitch/magic v0.0.0-20230404182410-1ff89d7342da
 	github.com/distribution/reference v0.6.0
-	github.com/docker/docker v26.0.0+incompatible
+	github.com/docker/docker v26.0.1+incompatible
 	github.com/dustin/go-humanize v1.0.1
 	github.com/elliotchance/phpserialize v1.4.0
 	github.com/facebookincubator/nvdtools v0.1.5
 	github.com/github/go-spdx/v2 v2.2.0
-	github.com/gkampitakis/go-snaps v0.5.2
+	github.com/gkampitakis/go-snaps v0.5.3
 	github.com/go-git/go-billy/v5 v5.5.0
 	github.com/go-git/go-git/v5 v5.12.0
 	github.com/go-test/deep v1.1.0
@@ -46,7 +46,7 @@ require (
 	github.com/hashicorp/go-multierror v1.1.1
 	github.com/iancoleman/strcase v0.3.0
 	github.com/invopop/jsonschema v0.7.0
-	github.com/jedib0t/go-pretty/v6 v6.5.6
+	github.com/jedib0t/go-pretty/v6 v6.5.8
 	github.com/jinzhu/copier v0.4.0
 	github.com/kastenhq/goversion v0.0.0-20230811215019-93b2f8823953
 	github.com/knqyf263/go-rpmdb v0.1.0
@@ -77,10 +77,10 @@ require (
 	github.com/xeipuuv/gojsonschema v1.2.0
 	github.com/zyedidia/generic v1.2.2-0.20230320175451-4410d2372cb1
 	go.uber.org/goleak v1.3.0
-	golang.org/x/mod v0.16.0
-	golang.org/x/net v0.23.0
+	golang.org/x/mod v0.17.0
+	golang.org/x/net v0.24.0
 	gopkg.in/yaml.v3 v3.0.1
-	modernc.org/sqlite v1.29.5
+	modernc.org/sqlite v1.29.7
 )

 require (
@@ -136,7 +136,7 @@ require (
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
 	github.com/golang/protobuf v1.5.3 // indirect
 	github.com/golang/snappy v0.0.4 // indirect
-	github.com/google/pprof v0.0.0-20221118152302-e6195bd50e26 // indirect
+	github.com/google/pprof v0.0.0-20240409012703-83162a5b38cd // indirect
 	github.com/hashicorp/errwrap v1.1.0 // indirect
 	github.com/hashicorp/golang-lru/v2 v2.0.7 // indirect
 	github.com/hashicorp/hcl v1.0.0 // indirect
@@ -155,7 +155,7 @@ require (
 	github.com/magiconair/properties v1.8.7 // indirect
 	github.com/maruel/natural v1.1.1 // indirect
 	github.com/mattn/go-colorable v0.1.13 // indirect
-	github.com/mattn/go-isatty v0.0.18 // indirect
+	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/mattn/go-localereader v0.0.2-0.20220822084749-2491eb6c1c75 // indirect
 	github.com/mattn/go-runewidth v0.0.15 // indirect
 	github.com/mgutz/ansi v0.0.0-20200706080929-d51e80ef957d // indirect
@@ -218,13 +218,13 @@ require (
 	go.opentelemetry.io/otel/trace v1.19.0 // indirect
 	go.uber.org/atomic v1.9.0 // indirect
 	go.uber.org/multierr v1.9.0 // indirect
-	golang.org/x/crypto v0.21.0 // indirect
+	golang.org/x/crypto v0.22.0 // indirect
 	golang.org/x/exp v0.0.0-20231108232855-2478ac86f678 // indirect
 	golang.org/x/sync v0.6.0 // indirect
-	golang.org/x/sys v0.18.0 // indirect
-	golang.org/x/term v0.18.0 // indirect
+	golang.org/x/sys v0.19.0 // indirect
+	golang.org/x/term v0.19.0 // indirect
 	golang.org/x/text v0.14.0 // indirect
-	golang.org/x/tools v0.17.0 // indirect
+	golang.org/x/tools v0.19.0 // indirect
 	golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2 // indirect
 	google.golang.org/genproto v0.0.0-20231106174013-bbf56f31fb17 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20231120223509-83a465c0220f // indirect
@@ -233,9 +233,9 @@ require (
 	gopkg.in/ini.v1 v1.67.0 // indirect
 	gopkg.in/warnings.v0 v0.1.2 // indirect
 	modernc.org/gc/v3 v3.0.0-20240107210532-573471604cb6 // indirect
-	modernc.org/libc v1.41.0 // indirect
+	modernc.org/libc v1.49.3 // indirect
 	modernc.org/mathutil v1.6.0 // indirect
-	modernc.org/memory v1.7.2 // indirect
+	modernc.org/memory v1.8.0 // indirect
 	modernc.org/strutil v1.2.0 // indirect
 	modernc.org/token v1.1.0 // indirect
 )
@@ -223,8 +223,8 @@ github.com/docker/cli v24.0.0+incompatible h1:0+1VshNwBQzQAx9lOl+OYCTCEAD8fKs/qe
 github.com/docker/cli v24.0.0+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
 github.com/docker/distribution v2.8.3+incompatible h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk=
 github.com/docker/distribution v2.8.3+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w=
-github.com/docker/docker v26.0.0+incompatible h1:Ng2qi+gdKADUa/VM+6b6YaY2nlZhk/lVJiKR/2bMudU=
-github.com/docker/docker v26.0.0+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
+github.com/docker/docker v26.0.1+incompatible h1:t39Hm6lpXuXtgkF0dm1t9a5HkbUfdGy6XbWexmGr+hA=
+github.com/docker/docker v26.0.1+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
 github.com/docker/docker-credential-helpers v0.7.0 h1:xtCHsjxogADNZcdv1pKUHXryefjlVRqWqIhk/uXJp0A=
 github.com/docker/docker-credential-helpers v0.7.0/go.mod h1:rETQfLdHNT3foU5kuNkFR1R1V12OJRRO5lzt2D1b5X0=
 github.com/docker/go-connections v0.4.0 h1:El9xVISelRB7BuFusrZozjnkIM5YnzCViNKohAFqRJQ=
@@ -283,8 +283,8 @@ github.com/gkampitakis/ciinfo v0.3.0 h1:gWZlOC2+RYYttL0hBqcoQhM7h1qNkVqvRCV1fOvp
 github.com/gkampitakis/ciinfo v0.3.0/go.mod h1:1NIwaOcFChN4fa/B0hEBdAb6npDlFL8Bwx4dfRLRqAo=
 github.com/gkampitakis/go-diff v1.3.2 h1:Qyn0J9XJSDTgnsgHRdz9Zp24RaJeKMUHg2+PDZZdC4M=
 github.com/gkampitakis/go-diff v1.3.2/go.mod h1:LLgOrpqleQe26cte8s36HTWcTmMEur6OPYerdAAS9tk=
-github.com/gkampitakis/go-snaps v0.5.2 h1:ay/6f7WHwRkOgpBec9DjMLRBAApziJommZ21NkOOCwY=
-github.com/gkampitakis/go-snaps v0.5.2/go.mod h1:ZABkO14uCuVxBHAXAfKG+bqNz+aa1bGPAg8jkI0Nk8Y=
+github.com/gkampitakis/go-snaps v0.5.3 h1:2cJnBgHzJhh0Jk5XBIyDYDe1Ylfncoa9r9bVJ5qvOAE=
+github.com/gkampitakis/go-snaps v0.5.3/go.mod h1:ZABkO14uCuVxBHAXAfKG+bqNz+aa1bGPAg8jkI0Nk8Y=
 github.com/glebarez/go-sqlite v1.20.3 h1:89BkqGOXR9oRmG58ZrzgoY/Fhy5x0M+/WV48U5zVrZ4=
 github.com/glebarez/go-sqlite v1.20.3/go.mod h1:u3N6D/wftiAzIOJtZl6BmedqxmmkDfH3q+ihjqxC9u0=
 github.com/gliderlabs/ssh v0.3.7 h1:iV3Bqi942d9huXnzEF2Mt+CY9gLu8DNM4Obd+8bODRE=
@@ -398,8 +398,8 @@ github.com/google/pprof v0.0.0-20210601050228-01bbb1931b22/go.mod h1:kpwsk12EmLe
 github.com/google/pprof v0.0.0-20210609004039-a478d1d731e9/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE=
 github.com/google/pprof v0.0.0-20210720184732-4bb14d4b1be1/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE=
 github.com/google/pprof v0.0.0-20211214055906-6f57359322fd/go.mod h1:KgnwoLYCZ8IQu3XUZ8Nc/bM9CCZFOyjUNOSygVozoDg=
-github.com/google/pprof v0.0.0-20221118152302-e6195bd50e26 h1:Xim43kblpZXfIBQsbuBVKCudVG457BR2GZFIz3uw3hQ=
-github.com/google/pprof v0.0.0-20221118152302-e6195bd50e26/go.mod h1:dDKJzRmX4S37WGHujM7tX//fmj1uioxKzKxz3lo4HJo=
+github.com/google/pprof v0.0.0-20240409012703-83162a5b38cd h1:gbpYu9NMq8jhDVbvlGkMFWCjLFlqqEZjEmObmhUy6Vo=
+github.com/google/pprof v0.0.0-20240409012703-83162a5b38cd/go.mod h1:kf6iHlnVGwgKolg33glAes7Yg/8iWP8ukqeldJSO7jw=
 github.com/google/renameio v0.1.0/go.mod h1:KWCgfxg9yswjAJkECMjeO8J8rahYeXnNhOm40UhjYkI=
 github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/google/uuid v1.1.2/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
@@ -473,8 +473,8 @@ github.com/invopop/jsonschema v0.7.0 h1:2vgQcBz1n256N+FpX3Jq7Y17AjYt46Ig3zIWyy77
 github.com/invopop/jsonschema v0.7.0/go.mod h1:O9uiLokuu0+MGFlyiaqtWxwqJm41/+8Nj0lD7A36YH0=
 github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 h1:BQSFePA1RWJOlocH6Fxy8MmwDt+yVQYULKfN0RoTN8A=
 github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99/go.mod h1:1lJo3i6rXxKeerYnT8Nvf0QmHCRC1n8sfWVwXF2Frvo=
-github.com/jedib0t/go-pretty/v6 v6.5.6 h1:nKXVLqPfAwY7sWcYXdNZZZ2fjqDpAtj9UeWupgfUxSg=
-github.com/jedib0t/go-pretty/v6 v6.5.6/go.mod h1:5LQIxa52oJ/DlDSLv0HEkWOFMDGoWkJb9ss5KqPpJBg=
+github.com/jedib0t/go-pretty/v6 v6.5.8 h1:8BCzJdSvUbaDuRba4YVh+SKMGcAAKdkcF3SVFbrHAtQ=
+github.com/jedib0t/go-pretty/v6 v6.5.8/go.mod h1:zbn98qrYlh95FIhwwsbIip0LYpwSG8SUOScs+v9/t0E=
 github.com/jinzhu/copier v0.4.0 h1:w3ciUoD19shMCRargcpm0cm91ytaBhDvuRpz1ODO/U8=
 github.com/jinzhu/copier v0.4.0/go.mod h1:DfbEm0FYsaqBcKcFuvmOZb218JkPGtvSHsKg8S8hyyg=
 github.com/json-iterator/go v1.1.6/go.mod h1:+SdeFBvtyEkXs7REEP0seUULqWtbJapLOCVDaaPEHmU=
@@ -536,8 +536,8 @@ github.com/mattn/go-isatty v0.0.11/go.mod h1:PhnuNfih5lzO57/f3n+odYbM4JtupLOxQOA
 github.com/mattn/go-isatty v0.0.12/go.mod h1:cbi8OIDigv2wuxKPP5vlRcQ1OAZbq2CE4Kysco4FUpU=
 github.com/mattn/go-isatty v0.0.14/go.mod h1:7GGIvUiUoEMVVmxf/4nioHXj79iQHKdU27kJ6hsGG94=
 github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM=
-github.com/mattn/go-isatty v0.0.18 h1:DOKFKCQ7FNG2L1rbrmstDN4QVRdS89Nkh85u68Uwp98=
-github.com/mattn/go-isatty v0.0.18/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
+github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
+github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/mattn/go-localereader v0.0.2-0.20220822084749-2491eb6c1c75 h1:P8UmIzZMYDR+NGImiFvErt6VWfIRPuGM+vyjiEdkmIw=
 github.com/mattn/go-localereader v0.0.2-0.20220822084749-2491eb6c1c75/go.mod h1:8fBrzywKY7BI3czFoHkuzRoWE9C+EiG4R1k4Cjx5p88=
 github.com/mattn/go-runewidth v0.0.9/go.mod h1:H031xJmbD/WCDINGzjvQ9THkh0rPKHF+m2gUSrubnMI=
@@ -867,8 +867,8 @@ golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0
 golang.org/x/crypto v0.3.0/go.mod h1:hebNnKkNXi2UzZN1eVRvBB7co0a+JxK6XbPiWVs/3J4=
 golang.org/x/crypto v0.3.1-0.20221117191849-2c476679df9a/go.mod h1:hebNnKkNXi2UzZN1eVRvBB7co0a+JxK6XbPiWVs/3J4=
 golang.org/x/crypto v0.7.0/go.mod h1:pYwdfH91IfpZVANVyUOhSIPZaFoJGxTFbZhFTx+dXZU=
-golang.org/x/crypto v0.21.0 h1:X31++rzVUdKhX5sWmSOFZxx8UW/ldWx55cbf08iNAMA=
-golang.org/x/crypto v0.21.0/go.mod h1:0BP7YvVV9gBbVKyeTG0Gyn+gZm94bibOW5BjDEYAOMs=
+golang.org/x/crypto v0.22.0 h1:g1v0xeRhjcugydODzvb3mEM9SQ0HGp9s/nh3COQ/C30=
+golang.org/x/crypto v0.22.0/go.mod h1:vr6Su+7cTlO45qkww3VDJlzDn0ctJvRgYbC2NvXHt+M=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8=
@@ -909,8 +909,8 @@ golang.org/x/mod v0.4.2/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.5.0/go.mod h1:5OXOZSfqPIIbmVBIIKWRFfZjPR0E5r58TLhUjH0a2Ro=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
-golang.org/x/mod v0.16.0 h1:QX4fJ0Rr5cPQCF7O9lh9Se4pmwfwskqZfq5moyldzic=
-golang.org/x/mod v0.16.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
+golang.org/x/mod v0.17.0 h1:zY54UmvipHiNd+pm+m0x9KhZ9hl1/7QNMyxXbc6ICqA=
+golang.org/x/mod v0.17.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
 golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20181023162649-9b4f9f5ad519/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
@@ -958,8 +958,8 @@ golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug
 golang.org/x/net v0.2.0/go.mod h1:KqCZLdyyvdV855qA2rE3GC2aiw5xGR5TEjj8smXukLY=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
 golang.org/x/net v0.8.0/go.mod h1:QVkue5JL9kW//ek3r6jTKnTFis1tRmNAW2P1shuFdJc=
-golang.org/x/net v0.23.0 h1:7EYJ93RZ9vYSZAIb2x3lnuvqO5zneoD6IvWjuhfxjTs=
-golang.org/x/net v0.23.0/go.mod h1:JKghWKKOSdJwpW2GEx0Ja7fmaKnMsbu+MWVZTokSYmg=
+golang.org/x/net v0.24.0 h1:1PcaxkF854Fu3+lvBIx5SYn9wRlBzzcnHZSiaFFAb0w=
+golang.org/x/net v0.24.0/go.mod h1:2Q7sJY5mzlzWjKtYUEXSlBWCdyaioyXzRB2RtU8KVE8=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
@@ -1071,15 +1071,15 @@ golang.org/x/sys v0.2.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.3.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.18.0 h1:DBdB3niSjOA/O0blCZBqDefyWNYveAYMNF1Wum0DYQ4=
-golang.org/x/sys v0.18.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.19.0 h1:q5f1RH2jigJ1MoAWp2KTp3gm5zAGFUTarQZ5U386+4o=
+golang.org/x/sys v0.19.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.2.0/go.mod h1:TVmDHMZPmdnySmBfhjOoOdhjzdE1h4u1VwSiw2l1Nuc=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
 golang.org/x/term v0.6.0/go.mod h1:m6U89DPEgQRMq3DNkDClhWw02AUbt2daBVO4cn4Hv9U=
-golang.org/x/term v0.18.0 h1:FcHjZXDMxI8mM3nwhX9HlKop4C0YQvCVCdwYl2wOtE8=
-golang.org/x/term v0.18.0/go.mod h1:ILwASektA3OnRv7amZ1xhE/KTR+u50pbXfZ03+6Nx58=
+golang.org/x/term v0.19.0 h1:+ThwsDv+tYfnJFhF4L8jITxu1tdTWRTZpdsWgEgjL6Q=
+golang.org/x/term v0.19.0/go.mod h1:2CuTdWZ7KHSQwUzKva0cbMg6q2DMI3Mmxp+gKJbskEk=
 golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
@@ -1155,8 +1155,8 @@ golang.org/x/tools v0.1.4/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
 golang.org/x/tools v0.1.5/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
 golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
-golang.org/x/tools v0.17.0 h1:FvmRgNOcs3kOa+T20R1uhfP9F6HgG2mfxDv1vrx1Htc=
-golang.org/x/tools v0.17.0/go.mod h1:xsh6VxdV005rRVaS6SSAf9oiAqljS7UZUacMZ8Bnsps=
+golang.org/x/tools v0.19.0 h1:tfGCXNR1OsFG+sVdLAitlpjAvD/I6dHDKnYrpEZUHkw=
+golang.org/x/tools v0.19.0/go.mod h1:qoJWxmGSIBmAeriMx19ogtrEPrGtDbPK634QFIcLAhc=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
@@ -1349,18 +1349,28 @@ honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWh
 honnef.co/go/tools v0.0.1-2019.2.3/go.mod h1:a3bituU0lyd329TUQxRnasdCoJDkEUEAqEt0JzvZhAg=
 honnef.co/go/tools v0.0.1-2020.1.3/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
 honnef.co/go/tools v0.0.1-2020.1.4/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
+modernc.org/cc/v4 v4.20.0 h1:45Or8mQfbUqJOG9WaxvlFYOAQO0lQ5RvqBcFCXngjxk=
+modernc.org/cc/v4 v4.20.0/go.mod h1:HM7VJTZbUCR3rV8EYBi9wxnJ0ZBRiGE5OeGXNA0IsLQ=
+modernc.org/ccgo/v4 v4.16.0 h1:ofwORa6vx2FMm0916/CkZjpFPSR70VwTjUCe2Eg5BnA=
+modernc.org/ccgo/v4 v4.16.0/go.mod h1:dkNyWIjFrVIZ68DTo36vHK+6/ShBn4ysU61So6PIqCI=
 modernc.org/fileutil v1.3.0 h1:gQ5SIzK3H9kdfai/5x41oQiKValumqNTDXMvKo62HvE=
 modernc.org/fileutil v1.3.0/go.mod h1:XatxS8fZi3pS8/hKG2GH/ArUogfxjpEKs3Ku3aK4JyQ=
+modernc.org/gc/v2 v2.4.1 h1:9cNzOqPyMJBvrUipmynX0ZohMhcxPtMccYgGOJdOiBw=
+modernc.org/gc/v2 v2.4.1/go.mod h1:wzN5dK1AzVGoH6XOzc3YZ+ey/jPgYHLuVckd62P0GYU=
 modernc.org/gc/v3 v3.0.0-20240107210532-573471604cb6 h1:5D53IMaUuA5InSeMu9eJtlQXS2NxAhyWQvkKEgXZhHI=
 modernc.org/gc/v3 v3.0.0-20240107210532-573471604cb6/go.mod h1:Qz0X07sNOR1jWYCrJMEnbW/X55x206Q7Vt4mz6/wHp4=
-modernc.org/libc v1.41.0 h1:g9YAc6BkKlgORsUWj+JwqoB1wU3o4DE3bM3yvA3k+Gk=
-modernc.org/libc v1.41.0/go.mod h1:w0eszPsiXoOnoMJgrXjglgLuDy/bt5RR4y3QzUUeodY=
+modernc.org/libc v1.49.3 h1:j2MRCRdwJI2ls/sGbeSk0t2bypOG/uvPZUsGQFDulqg=
+modernc.org/libc v1.49.3/go.mod h1:yMZuGkn7pXbKfoT/M35gFJOAEdSKdxL0q64sF7KqCDo=
 modernc.org/mathutil v1.6.0 h1:fRe9+AmYlaej+64JsEEhoWuAYBkOtQiMEU7n/XgfYi4=
 modernc.org/mathutil v1.6.0/go.mod h1:Ui5Q9q1TR2gFm0AQRqQUaBWFLAhQpCwNcuhBOSedWPo=
-modernc.org/memory v1.7.2 h1:Klh90S215mmH8c9gO98QxQFsY+W451E8AnzjoE2ee1E=
-modernc.org/memory v1.7.2/go.mod h1:NO4NVCQy0N7ln+T9ngWqOQfi7ley4vpwvARR+Hjw95E=
-modernc.org/sqlite v1.29.5 h1:8l/SQKAjDtZFo9lkJLdk8g9JEOeYRG4/ghStDCCTiTE=
-modernc.org/sqlite v1.29.5/go.mod h1:S02dvcmm7TnTRvGhv8IGYyLnIt7AS2KPaB1F/71p75U=
+modernc.org/memory v1.8.0 h1:IqGTL6eFMaDZZhEWwcREgeMXYwmW83LYW8cROZYkg+E=
+modernc.org/memory v1.8.0/go.mod h1:XPZ936zp5OMKGWPqbD3JShgd/ZoQ7899TUuQqxY+peU=
+modernc.org/opt v0.1.3 h1:3XOZf2yznlhC+ibLltsDGzABUGVx8J6pnFMS3E4dcq4=
+modernc.org/opt v0.1.3/go.mod h1:WdSiB5evDcignE70guQKxYUl14mgWtbClRi5wmkkTX0=
+modernc.org/sortutil v1.2.0 h1:jQiD3PfS2REGJNzNCMMaLSp/wdMNieTbKX920Cqdgqc=
+modernc.org/sortutil v1.2.0/go.mod h1:TKU2s7kJMf1AE84OoiGppNHJwvB753OYfNl2WRb++Ss=
+modernc.org/sqlite v1.29.7 h1:Puwf5TIYuOipbcRnpFnLlGlR03DKenw8ggf3ijnuNQ0=
+modernc.org/sqlite v1.29.7/go.mod h1:lQPm27iqa4UNZpmr4Aor0MH0HkCLbt1huYDfWylLZFk=
 modernc.org/strutil v1.2.0 h1:agBi9dp1I+eOnxXeiZawM8F4LawKv4NzGWSaLfyeNZA=
 modernc.org/strutil v1.2.0/go.mod h1:/mdcBmfOibveCTBxUl5B5l6W+TTH1FXPLHZE6bTosX0=
 modernc.org/token v1.1.0 h1:Xl7Ap9dKaEs5kLoOQeQmPWevfnk/DM5qcLcYlA8ys6Y=
@@ -153,6 +153,27 @@ func FileContentsVersionMatcher(pattern string) EvidenceMatcher {
 	}
 }

+// matchExcluding tests the provided regular expressions against the file, and if matched, DOES NOT return
+// anything that the matcher would otherwise return
+func matchExcluding(matcher EvidenceMatcher, contentPatternsToExclude ...string) EvidenceMatcher {
+	var nonMatchPatterns []*regexp.Regexp
+	for _, p := range contentPatternsToExclude {
+		nonMatchPatterns = append(nonMatchPatterns, regexp.MustCompile(p))
+	}
+	return func(resolver file.Resolver, classifier Classifier, location file.Location) ([]pkg.Package, error) {
+		contents, err := getContents(resolver, location)
+		if err != nil {
+			return nil, fmt.Errorf("unable to get read contents for file: %w", err)
+		}
+		for _, nonMatch := range nonMatchPatterns {
+			if nonMatch.Match(contents) {
+				return nil, nil
+			}
+		}
+		return matcher(resolver, classifier, location)
+	}
+}
+
 //nolint:gocognit
 func sharedLibraryLookup(sharedLibraryPattern string, sharedLibraryMatcher EvidenceMatcher) EvidenceMatcher {
 	pat := regexp.MustCompile(sharedLibraryPattern)
@@ -608,10 +608,10 @@ func Test_Cataloger_PositiveCases(t *testing.T) {
 		{
 			logicalFixture: "java-jre-openjdk/1.8.0_352-b08/linux-amd64",
 			expected: pkg.Package{
-				Name:      "java",
+				Name:      "java/jre",
 				Version:   "1.8.0_352-b08",
 				Type:      "binary",
-				PURL:      "pkg:generic/java@1.8.0_352-b08",
+				PURL:      "pkg:generic/java/jre@1.8.0_352-b08",
 				Locations: locations("java"),
 				Metadata:  metadata("java-binary-openjdk", "java"),
 			},
@@ -619,10 +619,32 @@ func Test_Cataloger_PositiveCases(t *testing.T) {
 		{
 			logicalFixture: "java-jre-openjdk/11.0.17/linux-amd64",
 			expected: pkg.Package{
-				Name:      "java",
+				Name:      "java/jre",
 				Version:   "11.0.17+8-LTS",
 				Type:      "binary",
-				PURL:      "pkg:generic/java@11.0.17%2B8-LTS",
+				PURL:      "pkg:generic/java/jre@11.0.17%2B8-LTS",
+				Locations: locations("java"),
+				Metadata:  metadata("java-binary-openjdk", "java"),
+			},
+		},
+		{
+			logicalFixture: "java-jre-openjdk-eclipse/11.0.22/linux-amd64",
+			expected: pkg.Package{
+				Name:      "java/jre",
+				Version:   "11.0.22+7",
+				Type:      "binary",
+				PURL:      "pkg:generic/java/jre@11.0.22%2B7",
+				Locations: locations("java"),
+				Metadata:  metadata("java-binary-openjdk", "java"),
+			},
+		},
+		{
+			logicalFixture: "java-jre-openjdk-arm64-eclipse/11.0.22/linux-arm64",
+			expected: pkg.Package{
+				Name:      "java/jre",
+				Version:   "11.0.22+7",
+				Type:      "binary",
+				PURL:      "pkg:generic/java/jre@11.0.22%2B7",
 				Locations: locations("java"),
 				Metadata:  metadata("java-binary-openjdk", "java"),
 			},
@@ -630,10 +652,10 @@ func Test_Cataloger_PositiveCases(t *testing.T) {
 		{
 			logicalFixture: "java-graal-openjdk/17.0.3+7-jvmci-22.1-b06/linux-amd64",
 			expected: pkg.Package{
-				Name:      "java",
+				Name:      "java/graalvm",
 				Version:   "17.0.3+7-jvmci-22.1-b06",
 				Type:      "binary",
-				PURL:      "pkg:generic/java@17.0.3%2B7-jvmci-22.1-b06",
+				PURL:      "pkg:generic/java/graalvm@17.0.3%2B7-jvmci-22.1-b06",
 				Locations: locations("java"),
 				Metadata:  metadata("java-binary-graalvm", "java"),
 			},
@@ -643,10 +665,10 @@ func Test_Cataloger_PositiveCases(t *testing.T) {
 			// note: cannot find the original binary, using a custom snippet based on the original snippet in the repo
 			logicalFixture: "java-jre-oracle/19.0.1/linux-amd64",
 			expected: pkg.Package{
-				Name:      "java",
+				Name:      "java/jre",
 				Version:   "19.0.1+10-21",
 				Type:      "binary",
-				PURL:      "pkg:generic/java@19.0.1%2B10-21",
+				PURL:      "pkg:generic/java/jre@19.0.1%2B10-21",
 				Locations: locations("java"),
 				Metadata:  metadata("java-binary-oracle", "java"),
 			},
@@ -656,10 +678,10 @@ func Test_Cataloger_PositiveCases(t *testing.T) {
 			// note: cannot find the original binary, using a custom snippet based on the original snippet in the repo
 			logicalFixture: "java-jre-oracle/19.0.1/darwin",
 			expected: pkg.Package{
-				Name:      "java",
+				Name:      "java/jre",
 				Version:   "19.0.1+10-21",
 				Type:      "binary",
-				PURL:      "pkg:generic/java@19.0.1%2B10-21",
+				PURL:      "pkg:generic/java/jre@19.0.1%2B10-21",
 				Locations: locations("java"),
 				Metadata:  metadata("java-binary-oracle", "java"),
 			},
@@ -667,14 +689,25 @@ func Test_Cataloger_PositiveCases(t *testing.T) {
 		{
 			logicalFixture: "java-jre-ibm/1.8.0_391/linux-amd64",
 			expected: pkg.Package{
-				Name:      "java",
+				Name:      "java/jre",
 				Version:   "1.8.0-foreman_2023_10_12_13_27-b00",
 				Type:      "binary",
-				PURL:      "pkg:generic/java@1.8.0-foreman_2023_10_12_13_27-b00",
+				PURL:      "pkg:generic/java/jre@1.8.0-foreman_2023_10_12_13_27-b00",
 				Locations: locations("java"),
 				Metadata:  metadata("java-binary-ibm", "java"),
 			},
 		},
+		{
+			logicalFixture: "java-jdk-openjdk/21.0.2+13-LTS/linux-amd64",
+			expected: pkg.Package{
+				Name:      "java/jdk",
+				Version:   "21.0.2+13-LTS",
+				Type:      "binary",
+				PURL:      "pkg:generic/java/jdk@21.0.2%2B13-LTS",
+				Locations: locations("jdb"),
+				Metadata:  metadata("java-binary-jdk", "java"),
+			},
+		},
 		{
 			logicalFixture: "rust-libstd/1.50.0/linux-amd64",
 			expected: pkg.Package{
@@ -87,14 +87,21 @@ func DefaultClassifiers() []Classifier {
 		{
 			Class:    "java-binary-openjdk",
 			FileGlob: "**/java",
-			EvidenceMatcher: FileContentsVersionMatcher(
-				// [NUL]openjdk[NUL]java[NUL]0.0[NUL]11.0.17+8-LTS[NUL]
-				// [NUL]openjdk[NUL]java[NUL]1.8[NUL]1.8.0_352-b08[NUL]
-				// Equivalent to the following regexp with lookahead support:
-				// (?m)\x00openjdk\x00java\x00(?P<release>[0-9]+[.0-9]*)\x00(?P<release>[0-9]+[.0-9]*) (?P<version>[0-9]+[^-\x00]+(-(?!jvmci)[^-\x00]+)+)
-				`(?m)\x00openjdk\x00java\x00(?P<release>[0-9]+[.0-9]*)\x00(?P<version>[0-9]+[^-\s]+(-([^-j\x00][^-\x00]?|[^-\x00][^-v\x00][^-\x00]?|[^-\x00][^-\x00][^-m\x00][^-\x00]?|[^-\x00][^-\x00][^-\x00][^-c\x00][^-\x00]?|[^-\x00][^-\x00][^-\x00][^-\x00][^-i\s].?|[^-\x00]{6,}))+)\x00`),
-			Package: "java",
-			PURL:    mustPURL("pkg:generic/java@version"),
+			EvidenceMatcher: matchExcluding(
+				evidenceMatchers(
+					FileContentsVersionMatcher(
+						// [NUL]openjdk[NUL]java[NUL]0.0[NUL]11.0.17+8-LTS[NUL]
+						// [NUL]openjdk[NUL]java[NUL]1.8[NUL]1.8.0_352-b08[NUL]
+						`(?m)\x00openjdk\x00java\x00(?P<release>[0-9]+[.0-9]*)\x00(?P<version>[0-9]+[^\x00]+)\x00`),
+					FileContentsVersionMatcher(
+						// arm64 versions: [NUL]0.0[NUL][NUL][NUL][NUL][NUL]11.0.22+7[NUL][NUL][NUL][NUL][NUL][NUL][NUL]openjdk[NUL]java[NUL]
+						`(?m)\x00(?P<release>[0-9]+[.0-9]*)\x00+(?P<version>[0-9]+[^\x00]+)\x00+openjdk\x00java`),
+				),
+				// don't match graalvm
+				"-jvmci-",
+			),
+			Package: "java/jre",
+			PURL:    mustPURL("pkg:generic/java/jre@version"),
 			// TODO the updates might need to be part of the CPE Attributes, like: 1.8.0:update152
 			CPEs: singleCPE("cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"),
 		},
@@ -104,18 +111,22 @@ func DefaultClassifiers() []Classifier {
 			EvidenceMatcher: FileContentsVersionMatcher(
 				// [NUL]java[NUL]1.8[NUL][NUL][NUL][NUL]1.8.0-foreman_2022_09_22_15_30-b00[NUL]
 				`(?m)\x00java\x00(?P<release>[0-9]+[.0-9]+)\x00{4}(?P<version>[0-9]+[-._a-zA-Z0-9]+)\x00`),
-			Package: "java",
-			PURL:    mustPURL("pkg:generic/java@version"),
+			Package: "java/jre",
+			PURL:    mustPURL("pkg:generic/java/jre@version"),
 			CPEs:    singleCPE("cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*"),
 		},
 		{
 			Class:    "java-binary-oracle",
 			FileGlob: "**/java",
-			EvidenceMatcher: FileContentsVersionMatcher(
-				// [NUL]19.0.1+10-21[NUL]
-				`(?m)\x00(?P<version>[0-9]+[.0-9]+[+][-0-9]+)\x00`),
-			Package: "java",
-			PURL:    mustPURL("pkg:generic/java@version"),
+			EvidenceMatcher: matchExcluding(
+				FileContentsVersionMatcher(
+					// [NUL]19.0.1+10-21[NUL]
+					`(?m)\x00(?P<version>[0-9]+[.0-9]+[+][-0-9]+)\x00`),
+				// don't match openjdk
+				`\x00openjdk\x00`,
+			),
+			Package: "java/jre",
+			PURL:    mustPURL("pkg:generic/java/jre@version"),
 			CPEs:    singleCPE("cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*"),
 		},
 		{
@@ -123,10 +134,19 @@ func DefaultClassifiers() []Classifier {
 			FileGlob: "**/java",
 			EvidenceMatcher: FileContentsVersionMatcher(
 				`(?m)\x00(?P<version>[0-9]+[.0-9]+[.0-9]+\+[0-9]+-jvmci-[0-9]+[.0-9]+-b[0-9]+)\x00`),
-			Package: "java",
-			PURL:    mustPURL("pkg:generic/java@version"),
+			Package: "java/graalvm",
+			PURL:    mustPURL("pkg:generic/java/graalvm@version"),
 			CPEs:    singleCPE("cpe:2.3:a:oracle:graalvm:*:*:*:*:*:*:*:*"),
 		},
+		{
+			Class:    "java-binary-jdk",
+			FileGlob: "**/jdb",
+			EvidenceMatcher: FileContentsVersionMatcher(
+				`(?m)\x00(?P<version>[0-9]+\.[0-9]+\.[0-9]+(\+[0-9]+)?([-._a-zA-Z0-9]+)?)\x00`),
+			Package: "java/jdk",
+			PURL:    mustPURL("pkg:generic/java/jdk@version"),
+			CPEs:    singleCPE("cpe:2.3:a:oracle:jdk:*:*:*:*:*:*:*:*"),
+		},
 		{
 			Class:    "nodejs-binary",
 			FileGlob: "**/node",
@@ -203,6 +203,22 @@ from-images:
    paths:
      - /usr/lib/jvm/java-11-amazon-corretto/bin/java

+  - name: java-jre-openjdk-eclipse
+    version: 11.0.22
+    images:
+      - ref: eclipse-temurin:11.0.22_7-jre@sha256:137960b9ec016cddeb366b7137546d37207d0f284f9492c23abf16a9c171dd51
+        platform: linux/amd64
+    paths:
+      - /opt/java/openjdk/bin/java
+
+  - name: java-jre-openjdk-arm64-eclipse
+    version: 11.0.22
+    images:
+      - ref: eclipse-temurin:11.0.22_7-jre@sha256:9bb82e8801e12e5377222fde83b5c91d87dc16f76c89e9f8affa678208f56797
+        platform: linux/arm64
+    paths:
+      - /opt/java/openjdk/bin/java
+
  - name: java-graal-openjdk
    version: 17.0.3+7-jvmci-22.1-b06
    images:
@@ -211,6 +227,14 @@ from-images:
    paths:
      - /opt/java/bin/java

+  - name: java-jdk-openjdk
+    version: 21.0.2+13-LTS
+    images:
+      - ref: eclipse-temurin:21.0.2_13-jdk-alpine@sha256:b5d37df8ee5bb964bb340acca83957f9a09291d07768fba1881f6bfc8048e4f5
+        platform: linux/amd64
+    paths:
+      - opt/java/openjdk/bin/jdb
+

 # TODO: this is not the original binary used in the test fixture
 #  - version: 5.12.5
@@ -151,7 +151,10 @@ func (c *goBinaryCataloger) makeGoMainPackage(resolver file.Resolver, mod *exten
 	return main
 }

-var semverPattern = regexp.MustCompile(`\x00(?P<version>v?(\d+\.\d+\.\d+[-\w]*[+\w]*))\x00`)
+// this is checking for (.L)? because at least one binary seems to have \xA0L preceding the version string, but for some reason
+// this is unable to be matched by the regex here as \x00\xA0L;
+// the only thing that seems to work is to just look for version strings following both \x00 and \x00.L for now
+var semverPattern = regexp.MustCompile(`\x00(.L)?(?P<version>v?(\d+\.\d+\.\d+[-\w]*[+\w]*))\x00`)

 func (c *goBinaryCataloger) findMainModuleVersion(metadata *pkg.GolangBinaryBuildinfoEntry, gbs pkg.KeyValues, reader io.ReadSeekCloser) string {
 	vcsVersion, hasVersion := gbs.Get("vcs.revision")
@@ -179,16 +182,8 @@ func (c *goBinaryCataloger) findMainModuleVersion(metadata *pkg.GolangBinaryBuil
 		if err != nil {
 			log.WithFields("error", err).Trace("unable to seek to start of go binary reader")
 		} else {
-			contents, err := io.ReadAll(reader)
-			if err != nil {
-				log.WithFields("error", err).Trace("unable to read from go binary reader")
-			} else {
-				matchMetadata := internal.MatchNamedCaptureGroups(semverPattern, string(contents))
-
-				version, ok := matchMetadata["version"]
-				if ok {
-					return version
-				}
+			if v := extractVersionFromContents(reader); v != "" {
+				return v
 			}
 		}
 	}
@@ -210,6 +205,21 @@ func (c *goBinaryCataloger) findMainModuleVersion(metadata *pkg.GolangBinaryBuil
 	return ""
 }

+func extractVersionFromContents(reader io.Reader) string {
+	contents, err := io.ReadAll(reader)
+	if err != nil {
+		log.WithFields("error", err).Trace("unable to read from go binary reader")
+		return ""
+	}
+	matchMetadata := internal.MatchNamedCaptureGroups(semverPattern, string(contents))
+
+	version, ok := matchMetadata["version"]
+	if ok {
+		return version
+	}
+	return ""
+}
+
 func extractVersionFromLDFlags(ldflags string) (majorVersion string, fullVersion string) {
 	if ldflags == "" {
 		return "", ""
@@ -2,6 +2,8 @@ package golang

 import (
 	"bufio"
+	"bytes"
+	"errors"
 	"io"
 	"os"
 	"os/exec"
@@ -1090,3 +1092,53 @@ func Test_extractVersionFromLDFlags(t *testing.T) {
 		})
 	}
 }
+
+func Test_extractVersionFromContents(t *testing.T) {
+	tests := []struct {
+		name     string
+		contents io.Reader
+		want     string
+	}{
+		{
+			name:     "empty string on error",
+			contents: &alwaysErrorReader{},
+			want:     "",
+		},
+		{
+			name:     "empty string on empty reader",
+			contents: bytes.NewReader([]byte{}),
+			want:     "",
+		},
+		{
+			name:     "null-byte delimited semver",
+			contents: strings.NewReader("\x001.2.3\x00"),
+			want:     "1.2.3",
+		},
+		{
+			name:     "null-byte delimited semver with v prefix",
+			contents: strings.NewReader("\x00v1.2.3\x00"),
+			want:     "v1.2.3",
+		},
+		{
+			// 01a0bfc8: 0e74 5a3b 0000 a04c 7631 2e39 2e35 0000  .tZ;...Lv1.9.5.. from nginx-ingress-controller
+			// at /nginx-ingress-controller in registry.k8s.io/ingress-nginx/controller:v1.9.5
+			// digest: sha256:b3aba22b1da80e7acfc52b115cae1d4c687172cbf2b742d5b502419c25ff340e
+			// TODO: eventually use something for managing snippets, similar to what's used with binary classifier tests
+			name:     "null byte, then random byte, then L then semver",
+			contents: strings.NewReader("\x0e\x74\x5a\x3b\x00\x00\xa0\x4cv1.9.5\x00\x00"),
+			want:     "v1.9.5",
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			got := extractVersionFromContents(tt.contents)
+			assert.Equal(t, tt.want, got)
+		})
+	}
+}
+
+type alwaysErrorReader struct{}
+
+func (alwaysErrorReader) Read(_ []byte) (int, error) {
+	return 0, errors.New("read from always error reader")
+}
@@ -692,7 +692,6 @@
      "mockserve": "cpe:2.3:a:mockserve_project:mockserve:*:*:*:*:*:node.js:*:*",
      "moment": "cpe:2.3:a:momentjs:moment:*:*:*:*:*:node.js:*:*",
      "mongodb-instance": "cpe:2.3:a:mongodb-instance_project:mongodb-instance:*:*:*:*:*:node.js:*:*",
-      "mongoose": "cpe:2.3:a:mongoosejs:mongoose:*:*:*:*:*:node.js:*:*",
      "mongose": "cpe:2.3:a:mongose_project:mongose:*:*:*:*:*:node.js:*:*",
      "monorepo-build": "cpe:2.3:a:monorepo-build_project:monorepo-build:*:*:*:*:*:node.js:*:*",
      "mootools": "cpe:2.3:a:mootools_project:mootools:*:*:*:*:*:node.js:*:*",
@@ -230,16 +230,26 @@ func cleanDescription(original *string) (cleaned string) {
 // resolveProperty emulates some maven property resolution logic by looking in the project's variables
 // as well as supporting the project expressions like ${project.parent.groupId}.
 // If no match is found, the entire expression including ${} is returned
-//
-//nolint:gocognit
 func resolveProperty(pom gopom.Project, property *string, propertyName string) string {
 	propertyCase := safeString(property)
 	log.WithFields("existingPropertyValue", propertyCase, "propertyName", propertyName).Trace("resolving property")
+	seenBeforePropertyNames := map[string]struct{}{
+		propertyName: {},
+	}
+	return recursiveResolveProperty(pom, propertyCase, seenBeforePropertyNames)
+}
+
+//nolint:gocognit
+func recursiveResolveProperty(pom gopom.Project, propertyCase string, seenPropertyNames map[string]struct{}) string {
 	return propertyMatcher.ReplaceAllStringFunc(propertyCase, func(match string) string {
 		propertyName := strings.TrimSpace(match[2 : len(match)-1]) // remove leading ${ and trailing }
+		if _, seen := seenPropertyNames[propertyName]; seen {
+			return propertyCase
+		}
 		entries := pomProperties(pom)
 		if value, ok := entries[propertyName]; ok {
-			return value
+			seenPropertyNames[propertyName] = struct{}{}
+			return recursiveResolveProperty(pom, value, seenPropertyNames) // recursively resolve in case a variable points to a variable.
 		}

 		// if we don't find anything directly in the pom properties,
@@ -514,6 +514,86 @@ func Test_resolveProperty(t *testing.T) {
 			},
 			expected: "${project.parent.groupId}",
 		},
+		{
+			name:     "double dereference",
+			property: "${springboot.version}",
+			pom: gopom.Project{
+				Parent: &gopom.Parent{
+					Version: stringPointer("1.2.3"),
+				},
+				Properties: &gopom.Properties{
+					Entries: map[string]string{
+						"springboot.version": "${project.parent.version}",
+					},
+				},
+			},
+			expected: "1.2.3",
+		},
+		{
+			name:     "map missing stops double dereference",
+			property: "${springboot.version}",
+			pom: gopom.Project{
+				Parent: &gopom.Parent{
+					Version: stringPointer("1.2.3"),
+				},
+			},
+			expected: "${springboot.version}",
+		},
+		{
+			name:     "resolution halts even if it resolves to a variable",
+			property: "${springboot.version}",
+			pom: gopom.Project{
+				Parent: &gopom.Parent{
+					Version: stringPointer("${undefined.version}"),
+				},
+				Properties: &gopom.Properties{
+					Entries: map[string]string{
+						"springboot.version": "${project.parent.version}",
+					},
+				},
+			},
+			expected: "${undefined.version}",
+		},
+		{
+			name:     "resolution halts even if cyclic",
+			property: "${springboot.version}",
+			pom: gopom.Project{
+				Properties: &gopom.Properties{
+					Entries: map[string]string{
+						"springboot.version": "${springboot.version}",
+					},
+				},
+			},
+			expected: "${springboot.version}",
+		},
+		{
+			name:     "resolution halts even if cyclic more steps",
+			property: "${cyclic.version}",
+			pom: gopom.Project{
+				Properties: &gopom.Properties{
+					Entries: map[string]string{
+						"other.version":      "${cyclic.version}",
+						"springboot.version": "${other.version}",
+						"cyclic.version":     "${springboot.version}",
+					},
+				},
+			},
+			expected: "${cyclic.version}",
+		},
+		{
+			name:     "resolution  halts even if cyclic involving parent",
+			property: "${cyclic.version}",
+			pom: gopom.Project{
+				Properties: &gopom.Properties{
+					Entries: map[string]string{
+						"other.version":      "${cyclic.version}",
+						"springboot.version": "${other.version}",
+						"cyclic.version":     "${springboot.version}",
+					},
+				},
+			},
+			expected: "${cyclic.version}",
+		},
 	}

 	for _, test := range tests {
@@ -5,12 +5,13 @@ import (
 	"fmt"
 	"io"

+	"github.com/elliotchance/phpserialize"
+
 	"github.com/anchore/syft/internal/log"
 	"github.com/anchore/syft/syft/artifact"
 	"github.com/anchore/syft/syft/file"
 	"github.com/anchore/syft/syft/pkg"
 	"github.com/anchore/syft/syft/pkg/cataloger/generic"
-	"github.com/elliotchance/phpserialize"
 )

 // parsePeclSerialized is a parser function for PECL metadata contents, returning "Default" php packages discovered.
Author	SHA1	Message	Date
Weston Steimel	e4fc1af3b8	fix(java): improvements to maven groupid lookups Signed-off-by: Weston Steimel <commits@weston.slmail.me>	2024-04-18 15:47:08 +01:00
William Murphy	3e71f46fc8	Fix: repeatedly dereference pom variables (#2781 ) * Fix: repeatedly dereference pom variables Previously, if there was more than one layer of variable indirection in the pom property (propert A says it has the same value as property B, property B says it has the same value as property C), then Syft would only dereference one layer. Add a loop to dereference variables until either dereferencing fails, or until the variable is completely dereferenced back to a literal. Signed-off-by: Will Murphy <will.murphy@anchore.com> * switch to recursive implementation Signed-off-by: Will Murphy <will.murphy@anchore.com> * add test cases for degenerate poms Signed-off-by: Will Murphy <will.murphy@anchore.com> * switch to recursive implementation Signed-off-by: Will Murphy <will.murphy@anchore.com> * remove redundant pieces of test cases Signed-off-by: Will Murphy <will.murphy@anchore.com> --------- Signed-off-by: Will Murphy <will.murphy@anchore.com>	2024-04-16 15:44:02 -04:00
dependabot[bot]	3b01e13f92	chore(deps): bump modernc.org/sqlite from 1.29.6 to 1.29.7 (#2783 ) Bumps [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) from 1.29.6 to 1.29.7. - [Commits](https://gitlab.com/cznic/sqlite/compare/v1.29.6...v1.29.7) --- updated-dependencies: - dependency-name: modernc.org/sqlite dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-04-16 11:05:35 -04:00
anchore-actions-token-generator[bot]andwestonsteimel	25c2e60358	chore(deps): update CPE dictionary index (#2780 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: westonsteimel <1593939+westonsteimel@users.noreply.github.com>	2024-04-15 11:15:38 -04:00
dependabot[bot]	dc7fa21980	chore(deps): bump github/codeql-action from 3.24.10 to 3.25.0 (#2779 ) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.10 to 3.25.0. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/4355270be187e1b672a7a1c7c7bae5afdc1ab94a...df5a14dc28094dc936e103b37d749c6628682b60) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-04-15 10:00:54 -04:00
Weston Steimel	587690b875	chore: fix broken cpe index generation task (#2778 ) Signed-off-by: Weston Steimel <commits@weston.slmail.me>	2024-04-15 09:39:57 -04:00
dependabot[bot]	21eaa5c82b	chore(deps): bump github.com/docker/docker (#2773 ) Bumps [github.com/docker/docker](https://github.com/docker/docker) from 26.0.0+incompatible to 26.0.1+incompatible. - [Release notes](https://github.com/docker/docker/releases) - [Commits](https://github.com/docker/docker/compare/v26.0.0...v26.0.1) --- updated-dependencies: - dependency-name: github.com/docker/docker dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-04-12 15:33:27 -04:00
dependabot[bot]	081ec04b3f	chore(deps): bump peter-evans/create-pull-request from 6.0.2 to 6.0.3 (#2774 ) Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 6.0.2 to 6.0.3. - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](https://github.com/peter-evans/create-pull-request/compare/70a41aba780001da0a30141984ae2a0c95d8704e...c55203cfde3e5c11a452d352b4393e68b85b4533) --- updated-dependencies: - dependency-name: peter-evans/create-pull-request dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-04-12 15:31:36 -04:00
Keith ZantowandWill Murphy	dde5d349b1	fix: more robust go main version extraction (#2767 ) Signed-off-by: Keith Zantow <kzantow@gmail.com> Signed-off-by: Will Murphy <will.murphy@anchore.com> Co-authored-by: Will Murphy <will.murphy@anchore.com>	2024-04-11 11:58:51 -04:00
anchore-actions-token-generator[bot]andspiffcs	a5d77b9263	chore(deps): update tools to latest versions (#2768 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: spiffcs <32073428+spiffcs@users.noreply.github.com>	2024-04-11 11:53:55 -04:00
Laurent GoderreandKeith Zantow	c9aab4863b	fix: binary character in java version (#2766 ) Signed-off-by: Laurent Goderre <laurent.goderre@docker.com> Signed-off-by: Keith Zantow <kzantow@gmail.com> Co-authored-by: Keith Zantow <kzantow@gmail.com>	2024-04-11 10:32:24 -04:00
anchore-actions-token-generator[bot]andspiffcs	af1a065d2a	chore(deps): update tools to latest versions (#2760 ) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: spiffcs <32073428+spiffcs@users.noreply.github.com>	2024-04-09 12:03:12 -04:00
dependabot[bot]	88cef1e05c	chore(deps): bump modernc.org/sqlite from 1.29.5 to 1.29.6 (#2761 ) Bumps [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) from 1.29.5 to 1.29.6. - [Commits](https://gitlab.com/cznic/sqlite/compare/v1.29.5...v1.29.6) --- updated-dependencies: - dependency-name: modernc.org/sqlite dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-04-09 12:02:56 -04:00
dependabot[bot]	870d97ca5a	chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.5.6 to 6.5.8 (#2754 ) Bumps [github.com/jedib0t/go-pretty/v6](https://github.com/jedib0t/go-pretty) from 6.5.6 to 6.5.8. - [Release notes](https://github.com/jedib0t/go-pretty/releases) - [Commits](https://github.com/jedib0t/go-pretty/compare/v6.5.6...v6.5.8) --- updated-dependencies: - dependency-name: github.com/jedib0t/go-pretty/v6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-04-08 12:19:45 -04:00
dependabot[bot]	e681bc4780	chore(deps): bump github.com/gkampitakis/go-snaps from 0.5.2 to 0.5.3 (#2755 ) Bumps [github.com/gkampitakis/go-snaps](https://github.com/gkampitakis/go-snaps) from 0.5.2 to 0.5.3. - [Release notes](https://github.com/gkampitakis/go-snaps/releases) - [Commits](https://github.com/gkampitakis/go-snaps/compare/v0.5.2...v0.5.3) --- updated-dependencies: - dependency-name: github.com/gkampitakis/go-snaps dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-04-08 12:19:32 -04:00
dependabot[bot]	c31696f131	chore(deps): bump github/codeql-action from 3.24.9 to 3.24.10 (#2756 ) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.9 to 3.24.10. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1b1aada464948af03b950897e5eb522f92603cc2...4355270be187e1b672a7a1c7c7bae5afdc1ab94a) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-04-08 12:19:20 -04:00
dependabot[bot]	67781e98a2	chore(deps): bump golang.org/x/mod from 0.16.0 to 0.17.0 (#2751 ) Bumps [golang.org/x/mod](https://github.com/golang/mod) from 0.16.0 to 0.17.0. - [Commits](https://github.com/golang/mod/compare/v0.16.0...v0.17.0) --- updated-dependencies: - dependency-name: golang.org/x/mod dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-04-05 19:22:00 +00:00
Laurent Goderre	619ace65c3	Differentiate between JRE and JDK (#2748 ) Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>	2024-04-05 15:10:58 -04:00
dependabot[bot]	3e4e3bb1d4	chore(deps): bump golang.org/x/net from 0.23.0 to 0.24.0 (#2752 ) Bumps [golang.org/x/net](https://github.com/golang/net) from 0.23.0 to 0.24.0. - [Commits](https://github.com/golang/net/compare/v0.23.0...v0.24.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-04-05 15:10:15 -04:00