Reverse artifact lookup?

[Brown, Carlton]

Hi all,

This question may in fact be generalized to Maven, but I'm wondering if
there is any reverse lookup mechanism for jar artifacts.   For example,
I have this mystery dependency called foo.jar.   Is there a way to
query a Maven-compliant repository to search on the checksum to
determine the group, module, revision, etc?   I think Archiva has this
feature, but could it proxy such a query to the Maven 2 repository?

Thanks,
Carlton

-

This message contains PRIVILEGED and CONFIDENTIAL
information that is intended only for use by the 
named recipient. If you are not the named recipient,
any disclosure, dissemination, or action based on 
the contents of this message is prohibited. In such
case please notify us and destroy and delete all 
copies of this transmission.  Thank you.

Re: Reverse artifact lookup?

[Wendy Smoak]

On Feb 18, 2008 7:33 AM, Brown, Carlton [EMAIL PROTECTED] wrote:

 This question may in fact be generalized to Maven, but I'm wondering if
 there is any reverse lookup mechanism for jar artifacts.   For example,
 I have this mystery dependency called foo.jar.   Is there a way to
 query a Maven-compliant repository to search on the checksum to
 determine the group, module, revision, etc?   I think Archiva has this
 feature, but could it proxy such a query to the Maven 2 repository?

Archiva does have that feature, but it only works on the content in
its own repositories.  If you have the disk space, you can rsync the
entire central repo locally and point Archiva at it, in which case
Archiva's checksum search feature would do what you wanted.

How do you see proxying a query through to the central Maven repo working?

In the short term, I've found that putting the checksum into a Google
search usually turns up information about the jar.  The central repo
doesn't seem to be showing up on search results, but some other repos
do, as well as various other clues.  I tried it with the md5 and sha1
checksums for the JUnit 3.8.1 jar.

HTH,
-- 
Wendy