Various jar files can be added as dependencies by utilizing nexus repository such as maven central.Suddenly, I wondered if there was any way to verify that the jar file uploaded here was built from the source code of the target.I thought that while building and deploying source code, a malicious third party would be able to get in and replace jar's deliverables.
ASK:
How about using decompilers such as JD-GUI to decompile class files in bulk and compare them with source code?Or, on the contrary, compile the source code and compare it.
© 2024 OneMinuteCode. All rights reserved.