fad-checker 2.0.0 → 2.1.0

package/test/fixtures/monorepo-mixed/libs/common-bom/pom.xml

@@ -1,26 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project xmlns="http://maven.apache.org/POM/4.0.0">
-	<modelVersion>4.0.0</modelVersion>
-	<parent>
-		<groupId>com.acme</groupId>
-		<artifactId>monorepo-parent</artifactId>
-		<version>1.0.0</version>
-		<relativePath>../../pom.xml</relativePath>
-	</parent>
-	<artifactId>common-bom</artifactId>
-	<packaging>pom</packaging>
-	<dependencyManagement>
-		<dependencies>
-			<dependency>
-				<groupId>com.fasterxml.jackson.core</groupId>
-				<artifactId>jackson-databind</artifactId>
-				<version>${jackson.version}</version>
-			</dependency>
-			<dependency>
-				<groupId>org.apache.logging.log4j</groupId>
-				<artifactId>log4j-core</artifactId>
-				<version>${log4j.version}</version>
-			</dependency>
-		</dependencies>
-	</dependencyManagement>
-</project>

package/test/fixtures/monorepo-mixed/packages/cli/package.json

@@ -1,14 +0,0 @@
-{
-	"name": "@acme/cli",
-	"version": "0.5.0",
-	"private": true,
-	"dependencies": {
-		"minimist": "1.2.5",
-		"node-fetch": "2.6.6",
-		"chalk": "4.1.2",
-		"@acme/private-utils": "1.0.0"
-	},
-	"devDependencies": {
-		"mocha": "9.0.0"
-	}
-}

package/test/fixtures/monorepo-mixed/packages/cli/yarn.lock

@@ -1,41 +0,0 @@
-# THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
-# yarn lockfile v1
-
-
-"@acme/private-utils@1.0.0":
-  version "1.0.0"
-  resolved "https://npm.acme.internal/@acme/private-utils/-/private-utils-1.0.0.tgz"
-  integrity sha512-private-fake-hash
-
-chalk@4.1.2:
-  version "4.1.2"
-  resolved "https://registry.yarnpkg.com/chalk/-/chalk-4.1.2.tgz"
-  integrity sha512-fake-chalk-hash
-  dependencies:
-    ansi-styles "^4.1.0"
-    supports-color "^7.1.0"
-
-ansi-styles@^4.1.0:
-  version "4.3.0"
-  resolved "https://registry.yarnpkg.com/ansi-styles/-/ansi-styles-4.3.0.tgz"
-  integrity sha512-fake-ansi-hash
-
-supports-color@^7.1.0:
-  version "7.2.0"
-  resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-7.2.0.tgz"
-  integrity sha512-fake-supports-hash
-
-mocha@9.0.0:
-  version "9.0.0"
-  resolved "https://registry.yarnpkg.com/mocha/-/mocha-9.0.0.tgz"
-  integrity sha512-fake-mocha-hash
-
-minimist@1.2.5:
-  version "1.2.5"
-  resolved "https://registry.yarnpkg.com/minimist/-/minimist-1.2.5.tgz"
-  integrity sha512-fake-minimist-hash
-
-node-fetch@2.6.6:
-  version "2.6.6"
-  resolved "https://registry.yarnpkg.com/node-fetch/-/node-fetch-2.6.6.tgz"
-  integrity sha512-fake-nodefetch-hash

package/test/fixtures/monorepo-mixed/packages/no-lock/package.json

@@ -1,10 +0,0 @@
-{
-	"name": "@acme/no-lock",
-	"version": "0.1.0",
-	"private": true,
-	"dependencies": {
-		"left-pad": "^1.0.0",
-		"chalk": "^4.0.0",
-		"semver": "7.5.0"
-	}
-}

package/test/fixtures/monorepo-mixed/packages/web-app/package-lock.json

@@ -1,71 +0,0 @@
-{
-	"name": "@acme/web-app",
-	"version": "1.0.0",
-	"lockfileVersion": 3,
-	"requires": true,
-	"packages": {
-		"": {
-			"name": "@acme/web-app",
-			"version": "1.0.0",
-			"dependencies": {
-				"axios": "0.21.0",
-				"lodash": "4.17.15",
-				"express": "4.17.1"
-			},
-			"devDependencies": {
-				"jest": "27.0.0",
-				"eslint": "7.32.0"
-			},
-			"peerDependencies": {
-				"react": "17.0.2"
-			}
-		},
-		"node_modules/axios": {
-			"version": "0.21.0",
-			"resolved": "https://registry.npmjs.org/axios/-/axios-0.21.0.tgz",
-			"integrity": "sha512-fakehash1",
-			"dependencies": { "follow-redirects": "1.13.0" }
-		},
-		"node_modules/follow-redirects": {
-			"version": "1.13.0",
-			"resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.13.0.tgz",
-			"integrity": "sha512-fakehash2"
-		},
-		"node_modules/lodash": {
-			"version": "4.17.15",
-			"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
-			"integrity": "sha512-fakehash3"
-		},
-		"node_modules/express": {
-			"version": "4.17.1",
-			"resolved": "https://registry.npmjs.org/express/-/express-4.17.1.tgz",
-			"integrity": "sha512-fakehash4",
-			"dependencies": {
-				"qs": "6.7.0"
-			}
-		},
-		"node_modules/qs": {
-			"version": "6.7.0",
-			"resolved": "https://registry.npmjs.org/qs/-/qs-6.7.0.tgz",
-			"integrity": "sha512-fakehash5"
-		},
-		"node_modules/jest": {
-			"version": "27.0.0",
-			"dev": true,
-			"resolved": "https://registry.npmjs.org/jest/-/jest-27.0.0.tgz",
-			"integrity": "sha512-fakehash6"
-		},
-		"node_modules/eslint": {
-			"version": "7.32.0",
-			"dev": true,
-			"resolved": "https://registry.npmjs.org/eslint/-/eslint-7.32.0.tgz",
-			"integrity": "sha512-fakehash7"
-		},
-		"node_modules/react": {
-			"version": "17.0.2",
-			"peer": true,
-			"resolved": "https://registry.npmjs.org/react/-/react-17.0.2.tgz",
-			"integrity": "sha512-fakehash8"
-		}
-	}
-}

package/test/fixtures/monorepo-mixed/packages/web-app/package.json

@@ -1,17 +0,0 @@
-{
-	"name": "@acme/web-app",
-	"version": "1.0.0",
-	"private": true,
-	"dependencies": {
-		"axios": "0.21.0",
-		"lodash": "4.17.15",
-		"express": "4.17.1"
-	},
-	"devDependencies": {
-		"jest": "27.0.0",
-		"eslint": "7.32.0"
-	},
-	"peerDependencies": {
-		"react": "17.0.2"
-	}
-}

package/test/fixtures/monorepo-mixed/pom.xml

@@ -1,29 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project xmlns="http://maven.apache.org/POM/4.0.0">
-	<modelVersion>4.0.0</modelVersion>
-	<groupId>com.acme</groupId>
-	<artifactId>monorepo-parent</artifactId>
-	<version>1.0.0</version>
-	<packaging>pom</packaging>
-	<modules>
-		<module>services/api</module>
-		<module>services/worker</module>
-		<module>libs/common-bom</module>
-	</modules>
-	<properties>
-		<jackson.version>2.9.10</jackson.version>
-		<log4j.version>2.14.0</log4j.version>
-		<spring.version>5.3.20</spring.version>
-	</properties>
-	<dependencyManagement>
-		<dependencies>
-			<dependency>
-				<groupId>com.acme</groupId>
-				<artifactId>common-bom</artifactId>
-				<version>1.0.0</version>
-				<type>pom</type>
-				<scope>import</scope>
-			</dependency>
-		</dependencies>
-	</dependencyManagement>
-</project>

package/test/fixtures/monorepo-mixed/services/api/pom.xml

@@ -1,27 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project xmlns="http://maven.apache.org/POM/4.0.0">
-	<modelVersion>4.0.0</modelVersion>
-	<parent>
-		<groupId>com.acme</groupId>
-		<artifactId>monorepo-parent</artifactId>
-		<version>1.0.0</version>
-		<relativePath>../../pom.xml</relativePath>
-	</parent>
-	<artifactId>api</artifactId>
-	<dependencies>
-		<dependency>
-			<groupId>com.fasterxml.jackson.core</groupId>
-			<artifactId>jackson-databind</artifactId>
-		</dependency>
-		<dependency>
-			<groupId>org.springframework</groupId>
-			<artifactId>spring-web</artifactId>
-			<version>${spring.version}</version>
-		</dependency>
-		<dependency>
-			<groupId>com.acme.private</groupId>
-			<artifactId>internal-auth</artifactId>
-			<version>1.2.3</version>
-		</dependency>
-	</dependencies>
-</project>

package/test/fixtures/monorepo-mixed/services/worker/pom.xml

@@ -1,28 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project xmlns="http://maven.apache.org/POM/4.0.0">
-	<modelVersion>4.0.0</modelVersion>
-	<parent>
-		<groupId>com.acme</groupId>
-		<artifactId>monorepo-parent</artifactId>
-		<version>1.0.0</version>
-		<relativePath>../../pom.xml</relativePath>
-	</parent>
-	<artifactId>worker</artifactId>
-	<dependencies>
-		<dependency>
-			<groupId>org.apache.logging.log4j</groupId>
-			<artifactId>log4j-core</artifactId>
-		</dependency>
-		<dependency>
-			<groupId>org.yaml</groupId>
-			<artifactId>snakeyaml</artifactId>
-			<version>1.30</version>
-		</dependency>
-		<dependency>
-			<groupId>junit</groupId>
-			<artifactId>junit</artifactId>
-			<version>4.12</version>
-			<scope>test</scope>
-		</dependency>
-	</dependencies>
-</project>

package/test/fixtures/php-app/composer.json

@@ -1,5 +0,0 @@
-{
-  "name": "acme/site",
-  "require": { "guzzlehttp/guzzle": "^7.0", "monolog/monolog": "2.9.1" },
-  "require-dev": { "phpunit/phpunit": "^10.0" }
-}

package/test/fixtures/php-app/composer.lock

@@ -1,10 +0,0 @@
-{
-  "packages": [
-    { "name": "guzzlehttp/guzzle", "version": "7.4.5" },
-    { "name": "monolog/monolog", "version": "2.9.1" },
-    { "name": "symfony/console", "version": "v6.2.10" }
-  ],
-  "packages-dev": [
-    { "name": "phpunit/phpunit", "version": "10.1.0" }
-  ]
-}

package/test/fixtures/polyglot/cs/packages.lock.json

@@ -1 +0,0 @@
-{ "version":1,"dependencies":{"net6.0":{"Newtonsoft.Json":{"type":"Direct","resolved":"13.0.1"}}} }

package/test/fixtures/polyglot/js/package-lock.json

@@ -1 +0,0 @@
-{ "name":"poly-js","lockfileVersion":3,"packages":{"node_modules/lodash":{"version":"4.17.21"}} }

package/test/fixtures/polyglot/js/package.json

@@ -1 +0,0 @@
-{ "name":"poly-js","dependencies":{"lodash":"^4.17.0"} }

package/test/fixtures/polyglot/mvn/pom.xml

@@ -1,7 +0,0 @@
-<project xmlns="http://maven.apache.org/POM/4.0.0">
-  <modelVersion>4.0.0</modelVersion>
-  <groupId>com.acme</groupId><artifactId>poly</artifactId><version>1.0.0</version>
-  <dependencies>
-    <dependency><groupId>org.apache.logging.log4j</groupId><artifactId>log4j-core</artifactId><version>2.14.0</version></dependency>
-  </dependencies>
-</project>

package/test/fixtures/polyglot/php/composer.lock

@@ -1 +0,0 @@
-{ "packages":[{"name":"guzzlehttp/guzzle","version":"7.4.5"}],"packages-dev":[] }

package/test/fixtures/polyglot/py/poetry.lock

@@ -1,3 +0,0 @@
-[[package]]
-name = "requests"
-version = "2.31.0"

package/test/fixtures/private-lib-detection/core/pom.xml

@@ -1,26 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project xmlns="http://maven.apache.org/POM/4.0.0">
-	<modelVersion>4.0.0</modelVersion>
-	<parent>
-		<groupId>com.client.app</groupId>
-		<artifactId>secret-monolith</artifactId>
-		<version>1.0.0</version>
-		<relativePath>..</relativePath>
-	</parent>
-	<artifactId>core</artifactId>
-	<dependencies>
-		<dependency>
-			<groupId>org.springframework</groupId>
-			<artifactId>spring-context</artifactId>
-		</dependency>
-		<dependency>
-			<groupId>com.client.private</groupId>
-			<artifactId>secret-lib</artifactId>
-		</dependency>
-		<dependency>
-			<groupId>org.megacorp.private</groupId>
-			<artifactId>megacorp-utils</artifactId>
-			<version>2.1.0</version>
-		</dependency>
-	</dependencies>
-</project>

package/test/fixtures/private-lib-detection/plugin/pom.xml

@@ -1,23 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project xmlns="http://maven.apache.org/POM/4.0.0">
-	<modelVersion>4.0.0</modelVersion>
-	<parent>
-		<groupId>com.client.app</groupId>
-		<artifactId>secret-monolith</artifactId>
-		<version>1.0.0</version>
-		<relativePath>..</relativePath>
-	</parent>
-	<artifactId>plugin</artifactId>
-	<dependencies>
-		<dependency>
-			<groupId>com.client.app</groupId>
-			<artifactId>core</artifactId>
-			<version>1.0.0</version>
-		</dependency>
-		<dependency>
-			<groupId>com.googlecode.json-simple</groupId>
-			<artifactId>json-simple</artifactId>
-			<version>1.1.1</version>
-		</dependency>
-	</dependencies>
-</project>

package/test/fixtures/private-lib-detection/pom.xml

@@ -1,35 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project xmlns="http://maven.apache.org/POM/4.0.0">
-	<modelVersion>4.0.0</modelVersion>
-	<parent>
-		<groupId>org.megacorp.parents</groupId>
-		<artifactId>megacorp-super-parent</artifactId>
-		<version>9.9.9-PRIVATE</version>
-	</parent>
-	<groupId>com.client.app</groupId>
-	<artifactId>secret-monolith</artifactId>
-	<version>1.0.0</version>
-	<packaging>pom</packaging>
-	<modules>
-		<module>core</module>
-		<module>plugin</module>
-	</modules>
-	<properties>
-		<spring.version>5.3.30</spring.version>
-		<secret-lib.version>1.0.0-CLIENT</secret-lib.version>
-	</properties>
-	<dependencyManagement>
-		<dependencies>
-			<dependency>
-				<groupId>com.client.private</groupId>
-				<artifactId>secret-lib</artifactId>
-				<version>${secret-lib.version}</version>
-			</dependency>
-			<dependency>
-				<groupId>org.springframework</groupId>
-				<artifactId>spring-context</artifactId>
-				<version>${spring.version}</version>
-			</dependency>
-		</dependencies>
-	</dependencyManagement>
-</project>

package/test/fixtures/python-pipenv/Pipfile.lock

@@ -1 +0,0 @@
-{ "default": { "django": { "version": "==4.2.0" } }, "develop": { "pytest": { "version": "==7.4.0" } } }

package/test/fixtures/python-poetry/poetry.lock

@@ -1,7 +0,0 @@
-[[package]]
-name = "requests"
-version = "2.31.0"
-
-[[package]]
-name = "Flask-SQLAlchemy"
-version = "3.0.5"

package/test/fixtures/python-reqs/requirements.txt

@@ -1,5 +0,0 @@
-# comment
-fastapi==0.103.0
-flask>=2.0          # range -> skipped
--e .
-urllib3==2.0.4

package/test/fixtures/python-uv/uv.lock

@@ -1,3 +0,0 @@
-[[package]]
-name = "numpy"
-version = "1.26.0"

package/test/fixtures/simple/app/pom.xml

@@ -1,28 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project xmlns="http://maven.apache.org/POM/4.0.0">
-	<modelVersion>4.0.0</modelVersion>
-	<parent>
-		<groupId>com.example.simple</groupId>
-		<artifactId>simple-parent</artifactId>
-		<version>1.0.0</version>
-		<relativePath>..</relativePath>
-	</parent>
-	<artifactId>app</artifactId>
-	<dependencies>
-		<dependency>
-			<groupId>com.fasterxml.jackson.core</groupId>
-			<artifactId>jackson-databind</artifactId>
-		</dependency>
-		<dependency>
-			<groupId>com.example.simple</groupId>
-			<artifactId>lib</artifactId>
-			<version>1.0.0</version>
-		</dependency>
-		<dependency>
-			<groupId>junit</groupId>
-			<artifactId>junit</artifactId>
-			<version>4.13.2</version>
-			<scope>test</scope>
-		</dependency>
-	</dependencies>
-</project>

package/test/fixtures/simple/lib/pom.xml

@@ -1,18 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project xmlns="http://maven.apache.org/POM/4.0.0">
-	<modelVersion>4.0.0</modelVersion>
-	<parent>
-		<groupId>com.example.simple</groupId>
-		<artifactId>simple-parent</artifactId>
-		<version>1.0.0</version>
-		<relativePath>..</relativePath>
-	</parent>
-	<artifactId>lib</artifactId>
-	<dependencies>
-		<dependency>
-			<groupId>org.apache.commons</groupId>
-			<artifactId>commons-lang3</artifactId>
-			<version>3.14.0</version>
-		</dependency>
-	</dependencies>
-</project>

package/test/fixtures/simple/pom.xml

@@ -1,24 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project xmlns="http://maven.apache.org/POM/4.0.0">
-	<modelVersion>4.0.0</modelVersion>
-	<groupId>com.example.simple</groupId>
-	<artifactId>simple-parent</artifactId>
-	<version>1.0.0</version>
-	<packaging>pom</packaging>
-	<modules>
-		<module>app</module>
-		<module>lib</module>
-	</modules>
-	<properties>
-		<jackson.version>2.16.0</jackson.version>
-	</properties>
-	<dependencyManagement>
-		<dependencies>
-			<dependency>
-				<groupId>com.fasterxml.jackson.core</groupId>
-				<artifactId>jackson-databind</artifactId>
-				<version>${jackson.version}</version>
-			</dependency>
-		</dependencies>
-	</dependencyManagement>
-</project>

package/test/maven-repo.test.js

@@ -1,111 +0,0 @@
-const { test } = require("node:test");
-const assert = require("node:assert/strict");
-const {
-	buildRepoList,
-	splitUrlAuth,
-	authHeader,
-	tryRepos,
-	fetchPomFromRepos,
-	fetchMavenMetadata,
-	MAVEN_CENTRAL,
-} = require("../lib/maven-repo");
-
-test("splitUrlAuth pulls user:pass out of a URL", () => {
-	const { url, auth } = splitUrlAuth("https://alice:s3cr3t@nexus.acme.com/repository/maven-public/");
-	assert.equal(auth, "alice:s3cr3t");
-	assert.ok(!/alice:s3cr3t/.test(url));
-	assert.ok(url.startsWith("https://nexus.acme.com/"));
-});
-
-test("splitUrlAuth no-op when URL has no auth", () => {
-	const { url, auth } = splitUrlAuth("https://repo1.maven.org/maven2/");
-	assert.equal(auth, null);
-	assert.equal(url, "https://repo1.maven.org/maven2/");
-});
-
-test("authHeader returns Basic <base64>", () => {
-	assert.equal(authHeader("alice:s3cr3t"), "Basic " + Buffer.from("alice:s3cr3t").toString("base64"));
-	assert.equal(authHeader(null), null);
-});
-
-test("buildRepoList puts user repos first, Central last, dedupes by URL, normalises trailing slash", () => {
-	const list = buildRepoList(
-		[
-			{ name: "nexus", url: "https://nexus.acme.com/repository/maven-public" },          // no trailing /
-			{ name: "jboss", url: "https://repository.jboss.org/nexus/content/groups/public/" },
-		],
-		[
-			{ url: "https://nexus.acme.com/repository/maven-public/" },                          // dup, with trailing /
-			{ url: "https://maven.atlassian.com/" },
-		],
-	);
-	assert.equal(list[0].name, "nexus");
-	assert.equal(list[0].url, "https://nexus.acme.com/repository/maven-public/");
-	assert.equal(list[1].name, "jboss");
-	// The dup of "nexus" is dropped
-	assert.equal(list.filter(r => r.name === "nexus").length, 1);
-	// atlassian is in the middle (extra repo, before Central)
-	assert.ok(list.some(r => r.url === "https://maven.atlassian.com/"));
-	// Maven Central is last
-	assert.equal(list[list.length - 1].url, MAVEN_CENTRAL.url);
-});
-
-test("buildRepoList strips and stores embedded user:pass auth", () => {
-	const list = buildRepoList([
-		{ name: "private", url: "https://bob:hunter2@nexus.acme.com/repository/private/" },
-	]);
-	assert.equal(list[0].url, "https://nexus.acme.com/repository/private/");
-	assert.equal(list[0].auth, "bob:hunter2");
-});
-
-test("tryRepos returns the first 2xx, skipping 404s", async () => {
-	const calls = [];
-	const fetcher = async (url) => {
-		calls.push(url);
-		if (url.startsWith("https://nexus.acme/")) return { ok: false, status: 404 };
-		if (url.startsWith("https://repo1.maven.org/")) return { ok: true, status: 200, text: async () => "<project/>" };
-		return { ok: false, status: 500 };
-	};
-	const repos = buildRepoList([{ name: "nexus", url: "https://nexus.acme/" }]);
-	const hit = await tryRepos(repos, "log4j/log4j/1.2.17/log4j-1.2.17.pom", { fetcher, readBody: true });
-	assert.ok(hit, "should hit Central after Nexus 404");
-	assert.equal(hit.repo.url, MAVEN_CENTRAL.url);
-	assert.equal(hit.body, "<project/>");
-	assert.equal(calls.length, 2);
-});
-
-test("tryRepos returns null when no repo answers 2xx", async () => {
-	const fetcher = async () => ({ ok: false, status: 404 });
-	const repos = buildRepoList([{ name: "a", url: "https://a.example/" }, { name: "b", url: "https://b.example/" }]);
-	const hit = await tryRepos(repos, "g/a/1/a-1.pom", { fetcher });
-	assert.equal(hit, null);
-});
-
-test("tryRepos sends Basic auth header for repos with creds", async () => {
-	let seenAuth = null;
-	const fetcher = async (url, init) => {
-		seenAuth = init?.headers?.Authorization || null;
-		return { ok: true, status: 200, text: async () => "ok" };
-	};
-	const repos = buildRepoList([{ name: "p", url: "https://x:y@nexus.acme/" }]);
-	await tryRepos(repos, "g/a/1/a-1.pom", { fetcher });
-	assert.equal(seenAuth, "Basic " + Buffer.from("x:y").toString("base64"));
-});
-
-test("fetchPomFromRepos constructs the standard Maven path", async () => {
-	const seen = [];
-	const fetcher = async (url) => { seen.push(url); return { ok: false, status: 404 }; };
-	const repos = buildRepoList([{ name: "a", url: "https://a.example/" }]);
-	await fetchPomFromRepos(repos, "org.apache.logging.log4j", "log4j-core", "2.17.0", { fetcher });
-	assert.ok(seen[0].endsWith("org/apache/logging/log4j/log4j-core/2.17.0/log4j-core-2.17.0.pom"),
-		`unexpected URL: ${seen[0]}`);
-});
-
-test("fetchMavenMetadata hits the maven-metadata.xml path", async () => {
-	const seen = [];
-	const fetcher = async (url) => { seen.push(url); return { ok: false, status: 404 }; };
-	const repos = buildRepoList([{ name: "a", url: "https://a.example/" }]);
-	await fetchMavenMetadata(repos, "org.apache.logging.log4j", "log4j-core", { fetcher });
-	assert.ok(seen[0].endsWith("org/apache/logging/log4j/log4j-core/maven-metadata.xml"),
-		`unexpected URL: ${seen[0]}`);
-});