kordamp/jarviz

Add a checksum checker command

Closed this issue · 2 comments

aalmiray commented

Calculate checksums for local JARs and compare them with their remote counterpart published at Maven Central. GAV coordinates must be known.

When --gav is used and the file is downloaded (cached) for the first time there's probably no need to check.
When other inputs are given (no explicit gav) then files must be inspected for their matching /META-INF/maven/**/<artifactId>/pom.properties entry, which will provide gav coordinates. If no matching entry is found then there's no gav thus causing a failure.