refactor: remove duplicate DependencyAggregator from JavaMavenProvider

[soul2zimate]

refactor: remove duplicate DependencyAggregator from JavaMavenProvider

[qodo-code-review]

Review Summary by Qodo

Consolidate DependencyAggregator into BaseJavaProvider base class

✨ Enhancement

Walkthroughs

Description

• Move DependencyAggregator class from JavaMavenProvider to BaseJavaProvider
• Eliminate duplicate code by centralizing shared dependency aggregation logic
• Remove unused imports (MalformedPackageURLException, TreeMap) from JavaMavenProvider
• Add toPurlWithoutVersion() method to BaseJavaProvider for coordinate matching

Diagram

flowchart LR
  A["JavaMavenProvider<br/>DependencyAggregator"] -- "move class" --> B["BaseJavaProvider<br/>DependencyAggregator"]
  C["JavaMavenProvider<br/>unused imports"] -- "remove" --> D["cleaned imports"]
  B -- "add method" --> E["toPurlWithoutVersion()"]

Loading

File Changes

1. src/main/java/io/github/guacsec/trustifyda/providers/BaseJavaProvider.java ✨ Enhancement +10/-0

Add toPurlWithoutVersion method to BaseJavaProvider

• Add new toPurlWithoutVersion() method to create PackageURL without version
• Method enables coordinate-based matching for dependencies
• Follows same pattern as existing toPurl() method with error handling

src/main/java/io/github/guacsec/trustifyda/providers/BaseJavaProvider.java

---

2. src/main/java/io/github/guacsec/trustifyda/providers/JavaMavenProvider.java Refactoring +0/-74

Remove duplicate DependencyAggregator and clean imports

• Remove duplicate DependencyAggregator class definition
• Remove unused imports: MalformedPackageURLException and TreeMap
• Consolidate dependency aggregation logic into base class
• Reduce code duplication across provider implementations

src/main/java/io/github/guacsec/trustifyda/providers/JavaMavenProvider.java

---

[qodo-code-review]

Code Review by Qodo

🐞 Bugs (0) 📘 Rule violations (0) 📎 Requirement gaps (0)

Great, no issues found!

Qodo reviewed your code and found no material issues that require review

ⓘ The new review experience is currently in Beta. Learn more