Fetching from the wire…
Research2026-08-30 · source-backed
AROMA+ automates the manual work behind Reproducible Central by recovering a library's source repository and original release environment from its Maven artifact, reaching up to 99.8% field-by-field accuracy against the hand-maintained list and catching flaws in it including broken repository links. At scale, automatic reproduction is feasible for 32% of Maven Central packages, and 12% of those verify fully. (arXiv 2608.27125) That's a concrete ceiling on how much of the Java supply chain can currently be checked byte-for-byte, and the dataset and tools are public.
Each link below shares sources, entities, or timing with this story.
Palantir released Maven / Shared entity: Only / Earlier coverage
Linked by a graph relationship (Palantir released Maven); both cover Only; earlier Only coverage from 2026-08-29.
Shared entity: Only / Same source domain / Earlier coverage / Tension
Both cover Only; reported by the same outlet (arxiv.org); earlier Only coverage from 2026-08-28.
Both cover Only; reported by the same outlet (arxiv.org); earlier Only coverage from 2026-08-20.
Both cover Only; reported by the same outlet (arxiv.org); earlier Only coverage from 2026-07-28.
Both cover Only; reported by the same outlet (arxiv.org); earlier Only coverage from 2026-07-21.
Shared entity: Java / Same source domain / Earlier coverage / Tension
Both cover Java; reported by the same outlet (arxiv.org); earlier Java coverage from 2026-07-21.
Both cover Java; reported by the same outlet (arxiv.org); earlier Java coverage from 2026-06-14.
Shared entities / Earlier coverage
Both cover Java, Maven; earlier Java coverage from 2026-05-29.