Fix Maven JAR PURL detection for packages without metadata

* Add maven.py module with enhanced JAR detection for Maven packages
* Detect Maven JARs via pom.properties files and URL pattern analysis
* Convert JAR PURLs to correct Maven format (pkg:jar → pkg:maven)
* Add comprehensive test suite covering all detection scenarios
* Update scan_codebase and inspect_packages pipelines
* Fixes perfmark-api-0.27.0.jar returning incorrect PURL format

Resolves #1836

Signed-off-by: Sara Faraj <[email protected]>

Author: sarafarajnasardi

scanpipe/pipelines/inspect_packages.py

@@ -22,6 +22,7 @@
 
 from aboutcode.pipeline import optional_step
 from scanpipe.pipelines.scan_codebase import ScanCodebase
+from scanpipe.pipes import maven
 from scanpipe.pipes import scancode
 
 
@@ -50,6 +51,7 @@ def steps(cls):
             cls.flag_empty_files,
             cls.flag_ignored_resources,
             cls.scan_for_application_packages,
+            cls.fix_maven_jar_packages,
             cls.resolve_dependencies,
         )
 
@@ -65,6 +67,10 @@ def scan_for_application_packages(self):
             progress_logger=self.log,
         )
 
+    def fix_maven_jar_packages(self):
+        """Fix JAR packages that should be Maven packages based on pom.properties."""
+        maven.detect_maven_jars_from_pom_properties(self.project, logger_func=self.log)
+
     @optional_step("StaticResolver")
     def resolve_dependencies(self):
         """

scanpipe/pipelines/scan_codebase.py

@@ -22,6 +22,7 @@
 
 from scanpipe import pipes
 from scanpipe.pipelines import Pipeline
+from scanpipe.pipes import maven
 from scanpipe.pipes import scancode
 from scanpipe.pipes.input import copy_inputs
 
@@ -44,6 +45,7 @@ def steps(cls):
             cls.flag_empty_files,
             cls.flag_ignored_resources,
             cls.scan_for_application_packages,
+            cls.fix_maven_jar_packages,
             cls.scan_for_files,
             cls.collect_and_create_license_detections,
         )
@@ -63,6 +65,10 @@ def scan_for_application_packages(self):
         """Scan unknown resources for packages information."""
         scancode.scan_for_application_packages(self.project, progress_logger=self.log)
 
+    def fix_maven_jar_packages(self):
+        """Fix JAR packages that should be Maven packages based on pom.properties."""
+        maven.detect_maven_jars_from_pom_properties(self.project, logger_func=self.log)
+
     def scan_for_files(self):
         """Scan unknown resources for copyrights, licenses, emails, and urls."""
         scancode.scan_for_files(self.project, progress_logger=self.log)