package pom_test

import (
	"fmt"
	"net/http"
	"net/http/httptest"
	"os"
	"path/filepath"
	"testing"

	"github.com/stretchr/testify/assert"
	"github.com/stretchr/testify/require"

	"github.com/aquasecurity/trivy/pkg/dependency/parser/java/pom"
	ftypes "github.com/aquasecurity/trivy/pkg/fanal/types"
)

var (
	exampleNestedScopeCompile = func(hash string, start, end int) ftypes.Package {
		var location ftypes.Locations
		if start != 0 && end != 0 {
			location = append(location, ftypes.Location{
				StartLine: start,
				EndLine:   end,
			})
		}
		return ftypes.Package{
			ID:           fmt.Sprintf("org.example:example-nested-scope-compile:1.0.0::%s", hash),
			Name:         "org.example:example-nested-scope-compile",
			Version:      "1.0.0",
			Relationship: ftypes.RelationshipDirect,
			Locations:    location,
		}
	}

	exampleNestedScopeEmpty = func(hash string, start, end int) ftypes.Package {
		var location ftypes.Locations
		if start != 0 && end != 0 {
			location = append(location, ftypes.Location{
				StartLine: start,
				EndLine:   end,
			})
		}
		return ftypes.Package{
			ID:           fmt.Sprintf("org.example:example-nested-scope-empty:1.0.0::%s", hash),
			Name:         "org.example:example-nested-scope-empty",
			Version:      "1.0.0",
			Relationship: ftypes.RelationshipDirect,
			Locations:    location,
		}
	}

	exampleNestedScopeRuntime = func(hash string, start, end int) ftypes.Package {
		var location ftypes.Locations
		if start != 0 && end != 0 {
			location = append(location, ftypes.Location{
				StartLine: start,
				EndLine:   end,
			})
		}
		return ftypes.Package{
			ID:           fmt.Sprintf("org.example:example-nested-scope-runtime:1.0.0::%s", hash),
			Name:         "org.example:example-nested-scope-runtime",
			Version:      "1.0.0",
			Relationship: ftypes.RelationshipDirect,
			Locations:    location,
		}
	}

	exampleScopeCompile = func(hash string) ftypes.Package {
		return ftypes.Package{
			ID:           fmt.Sprintf("org.example:example-scope-compile:2.0.0::%s", hash),
			Name:         "org.example:example-scope-compile",
			Version:      "2.0.0",
			Relationship: ftypes.RelationshipIndirect,
		}
	}

	exampleScopeEmpty = func(hash string) ftypes.Package {
		return ftypes.Package{
			ID:           fmt.Sprintf("org.example:example-scope-empty:2.0.0::%s", hash),
			Name:         "org.example:example-scope-empty",
			Version:      "2.0.0",
			Relationship: ftypes.RelationshipIndirect,
		}
	}

	exampleScopeRuntime = func(hash string) ftypes.Package {
		return ftypes.Package{
			ID:           fmt.Sprintf("org.example:example-scope-runtime:2.0.0::%s", hash),
			Name:         "org.example:example-scope-runtime",
			Version:      "2.0.0",
			Relationship: ftypes.RelationshipIndirect,
		}
	}
	exampleApiCompile = func(hash string) ftypes.Package {
		return ftypes.Package{
			ID:           fmt.Sprintf("org.example:example-api-compile:3.0.0::%s", hash),
			Name:         "org.example:example-api-compile",
			Version:      "3.0.0",
			Relationship: ftypes.RelationshipIndirect,
		}
	}

	exampleApiEmpty = func(hash string) ftypes.Package {
		return ftypes.Package{
			ID:           fmt.Sprintf("org.example:example-api-empty:3.0.0::%s", hash),
			Name:         "org.example:example-api-empty",
			Version:      "3.0.0",
			Relationship: ftypes.RelationshipIndirect,
		}
	}

	exampleApiRuntime = func(hash string) ftypes.Package {
		return ftypes.Package{
			ID:           fmt.Sprintf("org.example:example-api-runtime:3.0.0::%s", hash),
			Name:         "org.example:example-api-runtime",
			Version:      "3.0.0",
			Relationship: ftypes.RelationshipIndirect,
		}
	}
)

func TestPom_Parse(t *testing.T) {
	tests := []struct {
		name                      string
		inputFile                 string
		local                     bool
		enableRepoForSettingsRepo bool // use another repo for repository from settings.xml
		offline                   bool
		want                      []ftypes.Package
		wantDeps                  []ftypes.Dependency
		wantErr                   string
	}{
		{
			name:      "local repository",
			inputFile: filepath.Join("testdata", "happy", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:happy:1.0.0::a302c021",
					Name:         "com.example:happy",
					Version:      "1.0.0",
					Licenses:     []string{"BSD-3-Clause"},
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-api:1.7.30::e71631e7",
					Name:         "org.example:example-api",
					Version:      "1.7.30",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 32,
							EndLine:   36,
						},
					},
				},
				{
					ID:           "org.example:example-runtime:1.0.0::a3bf2630",
					Name:         "org.example:example-runtime",
					Version:      "1.0.0",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 37,
							EndLine:   42,
						},
					},
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:happy:1.0.0::a302c021",
					DependsOn: []string{
						"org.example:example-api:1.7.30::e71631e7",
						"org.example:example-runtime:1.0.0::a3bf2630",
					},
				},
			},
		},
		{
			name:      "remote release repository",
			inputFile: filepath.Join("testdata", "happy", "pom.xml"),
			local:     false,
			want: []ftypes.Package{
				{
					ID:           "com.example:happy:1.0.0::a302c021",
					Name:         "com.example:happy",
					Version:      "1.0.0",
					Licenses:     []string{"BSD-3-Clause"},
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-api:1.7.30::e71631e7",
					Name:         "org.example:example-api",
					Version:      "1.7.30",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 32,
							EndLine:   36,
						},
					},
				},
				{
					ID:           "org.example:example-runtime:1.0.0::a3bf2630",
					Name:         "org.example:example-runtime",
					Version:      "1.0.0",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 37,
							EndLine:   42,
						},
					},
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:happy:1.0.0::a302c021",
					DependsOn: []string{
						"org.example:example-api:1.7.30::e71631e7",
						"org.example:example-runtime:1.0.0::a3bf2630",
					},
				},
			},
		},
		{
			name:      "snapshot dependency",
			inputFile: filepath.Join("testdata", "snapshot", "pom.xml"),
			local:     false,
			want: []ftypes.Package{
				{
					ID:           "com.example:happy:1.0.0::8ccc0def",
					Name:         "com.example:happy",
					Version:      "1.0.0",
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-dependency:1.2.3-SNAPSHOT::1f825e0f",
					Name:         "org.example:example-dependency",
					Version:      "1.2.3-SNAPSHOT",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 14,
							EndLine:   18,
						},
					},
				},
				{
					ID:           "org.example:example-api:2.0.0::23653338",
					Name:         "org.example:example-api",
					Version:      "2.0.0",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipIndirect,
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:happy:1.0.0::8ccc0def",
					DependsOn: []string{
						"org.example:example-dependency:1.2.3-SNAPSHOT::1f825e0f",
					},
				},
				{
					ID: "org.example:example-dependency:1.2.3-SNAPSHOT::1f825e0f",
					DependsOn: []string{
						"org.example:example-api:2.0.0::23653338",
					},
				},
			},
		},
		{
			name:      "snapshot repository with maven-metadata.xml",
			inputFile: filepath.Join("testdata", "snapshot", "with-maven-metadata", "pom.xml"),
			local:     false,
			want: []ftypes.Package{
				{
					ID:           "com.example:happy:1.0.0::58fa9f0a",
					Name:         "com.example:happy",
					Version:      "1.0.0",
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-dependency:2.17.0-SNAPSHOT::c991922a",
					Name:         "org.example:example-dependency",
					Version:      "2.17.0-SNAPSHOT",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 14,
							EndLine:   18,
						},
					},
				},
				{
					ID:           "org.example:example-api:2.0.0::d5950bfc",
					Name:         "org.example:example-api",
					Version:      "2.0.0",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipIndirect,
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:happy:1.0.0::58fa9f0a",
					DependsOn: []string{
						"org.example:example-dependency:2.17.0-SNAPSHOT::c991922a",
					},
				},
				{
					ID: "org.example:example-dependency:2.17.0-SNAPSHOT::c991922a",
					DependsOn: []string{
						"org.example:example-api:2.0.0::d5950bfc",
					},
				},
			},
		},
		{
			name:      "offline mode",
			inputFile: filepath.Join("testdata", "offline", "pom.xml"),
			local:     false,
			offline:   true,
			want: []ftypes.Package{
				{
					ID:           "org.example:example-offline:2.3.4::7cc75b41",
					Name:         "org.example:example-offline",
					Version:      "2.3.4",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 17,
							EndLine:   21,
						},
					},
				},
			},
		},
		{
			name:                      "multiple repositories are used",
			inputFile:                 filepath.Join("testdata", "happy", "pom.xml"),
			local:                     false,
			enableRepoForSettingsRepo: true,
			want: []ftypes.Package{
				{
					ID:           "com.example:happy:1.0.0::a302c021",
					Name:         "com.example:happy",
					Version:      "1.0.0",
					Licenses:     []string{"BSD-3-Clause"},
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-api:1.7.30::e71631e7",
					Name:         "org.example:example-api",
					Version:      "1.7.30",
					Licenses:     []string{"Custom License from custom repo"},
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 32,
							EndLine:   36,
						},
					},
				},
				{
					ID:           "org.example:example-runtime:1.0.0::a3bf2630",
					Name:         "org.example:example-runtime",
					Version:      "1.0.0",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 37,
							EndLine:   42,
						},
					},
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:happy:1.0.0::a302c021",
					DependsOn: []string{
						"org.example:example-api:1.7.30::e71631e7",
						"org.example:example-runtime:1.0.0::a3bf2630",
					},
				},
			},
		},
		{
			name:      "inherit parent properties",
			inputFile: filepath.Join("testdata", "parent-properties", "child", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:child:1.0.0::f99913fa",
					Name:         "com.example:child",
					Version:      "1.0.0",
					Licenses:     []string{"Apache 2.0"},
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-api:1.7.30::c5884361",
					Name:         "org.example:example-api",
					Version:      "1.7.30",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 33,
							EndLine:   37,
						},
					},
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:child:1.0.0::f99913fa",
					DependsOn: []string{
						"org.example:example-api:1.7.30::c5884361",
					},
				},
			},
		},
		{
			name:      "inherit project properties from parent",
			inputFile: filepath.Join("testdata", "project-version-from-parent", "child", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:child:2.0.0::597860b7",
					Name:         "com.example:child",
					Version:      "2.0.0",
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-api:2.0.0::9ca5a4d0",
					Name:         "org.example:example-api",
					Version:      "2.0.0",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 18,
							EndLine:   22,
						},
					},
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:child:2.0.0::597860b7",
					DependsOn: []string{
						"org.example:example-api:2.0.0::9ca5a4d0",
					},
				},
			},
		},
		{
			name:      "inherit properties in parent depManagement with import scope",
			inputFile: filepath.Join("testdata", "inherit-props", "base", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:test:0.0.1-SNAPSHOT::30035f73",
					Name:         "com.example:test",
					Version:      "0.0.1-SNAPSHOT",
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-api:2.0.0::ce31c866",
					Name:         "org.example:example-api",
					Version:      "2.0.0",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 18,
							EndLine:   21,
						},
					},
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:test:0.0.1-SNAPSHOT::30035f73",
					DependsOn: []string{
						"org.example:example-api:2.0.0::ce31c866",
					},
				},
			},
		},
		{
			name:      "dependencyManagement prefers child properties",
			inputFile: filepath.Join("testdata", "parent-child-properties", "child", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:child:1.0.0::b6c336a6",
					Name:         "com.example:child",
					Version:      "1.0.0",
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-dependency:1.2.3::60fa7625",
					Name:         "org.example:example-dependency",
					Version:      "1.2.3",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 22,
							EndLine:   26,
						},
					},
				},
				{
					ID:           "org.example:example-api:4.0.0::221fee5d",
					Name:         "org.example:example-api",
					Version:      "4.0.0",
					Relationship: ftypes.RelationshipIndirect,
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:child:1.0.0::b6c336a6",
					DependsOn: []string{
						"org.example:example-dependency:1.2.3::60fa7625",
					},
				},
				{
					ID: "org.example:example-dependency:1.2.3::60fa7625",
					DependsOn: []string{
						"org.example:example-api:4.0.0::221fee5d",
					},
				},
			},
		},
		{
			name:      "inherit parent dependencies",
			inputFile: filepath.Join("testdata", "parent-dependencies", "child", "pom.xml"),
			local:     false,
			want: []ftypes.Package{
				{
					ID:           "com.example:child:1.0.0-SNAPSHOT::cdc3ce21",
					Name:         "com.example:child",
					Version:      "1.0.0-SNAPSHOT",
					Licenses:     []string{"Apache 2.0"},
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-api:1.7.30::2f579104",
					Name:         "org.example:example-api",
					Version:      "1.7.30",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipDirect,
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:child:1.0.0-SNAPSHOT::cdc3ce21",
					DependsOn: []string{
						"org.example:example-api:1.7.30::2f579104",
					},
				},
			},
		},
		{
			name:      "inherit parent dependencyManagement",
			inputFile: filepath.Join("testdata", "parent-dependency-management", "child", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:child:3.0.0::69b8f328",
					Name:         "com.example:child",
					Version:      "3.0.0",
					Licenses:     []string{"Apache 2.0"},
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-api:1.7.30::d2229a7d",
					Name:         "org.example:example-api",
					Version:      "1.7.30",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 26,
							EndLine:   29,
						},
					},
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:child:3.0.0::69b8f328",
					DependsOn: []string{
						"org.example:example-api:1.7.30::d2229a7d",
					},
				},
			},
		},
		{
			name:      "transitive parents",
			inputFile: filepath.Join("testdata", "transitive-parents", "base", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:base:4.0.0::c68788aa",
					Name:         "com.example:base",
					Version:      "4.0.0",
					Licenses:     []string{"Apache 2.0"},
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-child:2.0.0::3bffdbee",
					Name:         "org.example:example-child",
					Version:      "2.0.0",
					Licenses:     []string{"Apache 2.0"},
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 28,
							EndLine:   32,
						},
					},
				},
				{
					ID:           "org.example:example-api:1.7.30::a68e9573",
					Name:         "org.example:example-api",
					Version:      "1.7.30",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipIndirect,
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:base:4.0.0::c68788aa",
					DependsOn: []string{
						"org.example:example-child:2.0.0::3bffdbee",
					},
				},
				{
					ID: "org.example:example-child:2.0.0::3bffdbee",
					DependsOn: []string{
						"org.example:example-api:1.7.30::a68e9573",
					},
				},
			},
		},
		{
			name:      "parent relativePath",
			inputFile: filepath.Join("testdata", "parent-relative-path", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:child:1.0.0::42ad1811",
					Name:         "com.example:child",
					Version:      "1.0.0",
					Licenses:     []string{"Apache 2.0"},
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-api:1.7.30::d5f0ae9b",
					Name:         "org.example:example-api",
					Version:      "1.7.30",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 26,
							EndLine:   30,
						},
					},
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:child:1.0.0::42ad1811",
					DependsOn: []string{
						"org.example:example-api:1.7.30::d5f0ae9b",
					},
				},
			},
		},
		{
			name:      "parent version in property",
			inputFile: filepath.Join("testdata", "parent-version-is-property", "child", "pom.xml"),
			local:     false,
			want: []ftypes.Package{
				{
					ID:           "com.example:child:1.0.0-SNAPSHOT::d1a547b0",
					Name:         "com.example:child",
					Version:      "1.0.0-SNAPSHOT",
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-api:1.1.1::a9f8fc7e",
					Name:         "org.example:example-api",
					Version:      "1.1.1",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 19,
							EndLine:   22,
						},
					},
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:child:1.0.0-SNAPSHOT::d1a547b0",
					DependsOn: []string{
						"org.example:example-api:1.1.1::a9f8fc7e",
					},
				},
			},
		},
		{
			name:      "parent in a remote repository",
			inputFile: filepath.Join("testdata", "parent-remote-repository", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "org.example:child:1.0.0::fad89fc9",
					Name:         "org.example:child",
					Version:      "1.0.0",
					Licenses:     []string{"Apache 2.0"},
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-api:1.7.30::d7e76bdd",
					Name:         "org.example:example-api",
					Version:      "1.7.30",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 25,
							EndLine:   29,
						},
					},
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "org.example:child:1.0.0::fad89fc9",
					DependsOn: []string{
						"org.example:example-api:1.7.30::d7e76bdd",
					},
				},
			},
		},
		{
			// mvn dependency:tree
			// [INFO] com.example:soft:jar:1.0.0
			// [INFO] +- org.example:example-api:jar:1.7.30:compile
			// [INFO] \- org.example:example-dependency:jar:1.2.3:compile
			// Save DependsOn for each package - https://github.com/aquasecurity/go-dep-parser/pull/243#discussion_r1303904548
			name:      "soft requirement",
			inputFile: filepath.Join("testdata", "soft-requirement", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:soft:1.0.0::8d42a73a",
					Name:         "com.example:soft",
					Version:      "1.0.0",
					Licenses:     []string{"Apache 2.0"},
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-api:1.7.30::2f38d7a0",
					Name:         "org.example:example-api",
					Version:      "1.7.30",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 32,
							EndLine:   36,
						},
					},
				},
				{
					ID:           "org.example:example-dependency:1.2.3::3c6b5344",
					Name:         "org.example:example-dependency",
					Version:      "1.2.3",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 37,
							EndLine:   41,
						},
					},
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:soft:1.0.0::8d42a73a",
					DependsOn: []string{
						"org.example:example-api:1.7.30::2f38d7a0",
						"org.example:example-dependency:1.2.3::3c6b5344",
					},
				},
				{
					ID: "org.example:example-dependency:1.2.3::3c6b5344",
					DependsOn: []string{
						"org.example:example-api:1.7.30::2f38d7a0",
					},
				},
			},
		},
		{
			// mvn dependency:tree
			// [INFO] com.example:soft-transitive:jar:1.0.0
			// [INFO] +- org.example:example-dependency:jar:1.2.3:compile
			// [INFO] |  \- org.example:example-api:jar:2.0.0:compile
			// [INFO] \- org.example:example-dependency2:jar:2.3.4:compile
			// Save DependsOn for each package - https://github.com/aquasecurity/go-dep-parser/pull/243#discussion_r1303904548
			name:      "soft requirement with transitive dependencies",
			inputFile: filepath.Join("testdata", "soft-requirement-with-transitive-dependencies", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:soft-transitive:1.0.0::c0e1772a",
					Name:         "com.example:soft-transitive",
					Version:      "1.0.0",
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-dependency:1.2.3::3ce2f1f4",
					Name:         "org.example:example-dependency",
					Version:      "1.2.3",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 13,
							EndLine:   17,
						},
					},
				},
				{
					ID:           "org.example:example-dependency2:2.3.4::db8652ac",
					Name:         "org.example:example-dependency2",
					Version:      "2.3.4",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 18,
							EndLine:   22,
						},
					},
				},
				{
					ID:           "org.example:example-api:2.0.0::497435d5",
					Name:         "org.example:example-api",
					Version:      "2.0.0",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipIndirect,
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:soft-transitive:1.0.0::c0e1772a",
					DependsOn: []string{
						"org.example:example-dependency2:2.3.4::db8652ac",
						"org.example:example-dependency:1.2.3::3ce2f1f4",
					},
				},
				{
					ID: "org.example:example-dependency2:2.3.4::db8652ac",
					DependsOn: []string{
						"org.example:example-api:2.0.0::497435d5",
					},
				},
				{
					ID: "org.example:example-dependency:1.2.3::3ce2f1f4",
					DependsOn: []string{
						"org.example:example-api:2.0.0::497435d5",
					},
				},
			},
		},
		{
			// mvn dependency:tree
			//[INFO] com.example:hard:jar:1.0.0
			//[INFO] +- org.example:example-nested:jar:3.3.4:compile
			//[INFO] \- org.example:example-dependency:jar:1.2.3:compile
			//[INFO]    \- org.example:example-api:jar:2.0.0:compile
			// Save DependsOn for each package - https://github.com/aquasecurity/go-dep-parser/pull/243#discussion_r1303904548
			name:      "hard requirement for the specified version",
			inputFile: filepath.Join("testdata", "hard-requirement", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:hard:1.0.0::62f5ef2d",
					Name:         "com.example:hard",
					Version:      "1.0.0",
					Licenses:     []string{"Apache 2.0"},
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-dependency:1.2.3::31ca2fff",
					Name:         "org.example:example-dependency",
					Version:      "1.2.3",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 33,
							EndLine:   37,
						},
					},
				},
				{
					ID:           "org.example:example-nested:3.3.4::8f4a4bcf",
					Name:         "org.example:example-nested",
					Version:      "3.3.4",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 28,
							EndLine:   32,
						},
					},
				},
				{
					ID:           "org.example:example-api:2.0.0::de424d15",
					Name:         "org.example:example-api",
					Version:      "2.0.0",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipIndirect,
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:hard:1.0.0::62f5ef2d",
					DependsOn: []string{
						"org.example:example-dependency:1.2.3::31ca2fff",
						"org.example:example-nested:3.3.4::8f4a4bcf",
					},
				},
				{
					ID: "org.example:example-dependency:1.2.3::31ca2fff",
					DependsOn: []string{
						"org.example:example-api:2.0.0::de424d15",
					},
				},
				{
					ID: "org.example:example-nested:3.3.4::8f4a4bcf",
					DependsOn: []string{
						"org.example:example-dependency:1.2.3::31ca2fff",
					},
				},
			},
		},
		{
			name:      "version requirement",
			inputFile: filepath.Join("testdata", "version-requirement", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:hard:1.0.0::4675cb8d",
					Name:         "com.example:hard",
					Version:      "1.0.0",
					Licenses:     []string{"Apache 2.0"},
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-api::ab862f6b",
					Name:         "org.example:example-api",
					Relationship: ftypes.RelationshipDirect,
					Locations: []ftypes.Location{
						{
							StartLine: 28,
							EndLine:   32,
						},
					},
				},
			},
		},
		{
			name:      "import dependencyManagement",
			inputFile: filepath.Join("testdata", "import-dependency-management", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:import:2.0.0::5743dcbc",
					Name:         "com.example:import",
					Version:      "2.0.0",
					Licenses:     []string{"Apache 2.0"},
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-api:1.7.30::6537575e",
					Name:         "org.example:example-api",
					Version:      "1.7.30",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 34,
							EndLine:   37,
						},
					},
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:import:2.0.0::5743dcbc",
					DependsOn: []string{
						"org.example:example-api:1.7.30::6537575e",
					},
				},
			},
		},
		{
			name:      "import multiple dependencyManagement",
			inputFile: filepath.Join("testdata", "import-dependency-management-multiple", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:import:2.0.0::e3fa6c29",
					Name:         "com.example:import",
					Version:      "2.0.0",
					Licenses:     []string{"Apache 2.0"},
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-api:1.7.30::807a5be4",
					Name:         "org.example:example-api",
					Version:      "1.7.30",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 42,
							EndLine:   45,
						},
					},
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:import:2.0.0::e3fa6c29",
					DependsOn: []string{
						"org.example:example-api:1.7.30::807a5be4",
					},
				},
			},
		},
		{
			name:      "exclusions",
			inputFile: filepath.Join("testdata", "exclusions", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:exclusions:3.0.0::5e2d4180",
					Name:         "com.example:exclusions",
					Version:      "3.0.0",
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-nested:3.3.3::7d2a59bf",
					Name:         "org.example:example-nested",
					Version:      "3.3.3",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 14,
							EndLine:   28,
						},
					},
				},
				{
					ID:           "org.example:example-dependency:1.2.3::fc52d05e",
					Name:         "org.example:example-dependency",
					Version:      "1.2.3",
					Relationship: ftypes.RelationshipIndirect,
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:exclusions:3.0.0::5e2d4180",
					DependsOn: []string{
						"org.example:example-nested:3.3.3::7d2a59bf",
					},
				},
				{
					ID: "org.example:example-nested:3.3.3::7d2a59bf",
					DependsOn: []string{
						"org.example:example-dependency:1.2.3::fc52d05e",
					},
				},
			},
		},
		{
			name:      "exclusions in child",
			inputFile: filepath.Join("testdata", "exclusions-in-child", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:example:1.0.0::1d893cfb",
					Name:         "com.example:example",
					Version:      "1.0.0",
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-exclusions:4.0.0::d9903c57",
					Name:         "org.example:example-exclusions",
					Version:      "4.0.0",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 10,
							EndLine:   14,
						},
					},
				},
				{
					ID:           "org.example:example-api:1.7.30::bc3d025d",
					Name:         "org.example:example-api",
					Version:      "1.7.30",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipIndirect,
				},
				{
					ID:           "org.example:example-dependency:1.2.3::5bdfcd45",
					Name:         "org.example:example-dependency",
					Version:      "1.2.3",
					Relationship: ftypes.RelationshipIndirect,
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:example:1.0.0::1d893cfb",
					DependsOn: []string{
						"org.example:example-exclusions:4.0.0::d9903c57",
					},
				},
				{
					ID: "org.example:example-exclusions:4.0.0::d9903c57",
					DependsOn: []string{
						"org.example:example-api:1.7.30::bc3d025d",
						"org.example:example-dependency:1.2.3::5bdfcd45",
					},
				},
			},
		},
		// ➜ mvn dependency:tree
		// ...
		// [INFO]
		// [INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @ child ---
		// [INFO] com.example:child:jar:3.0.0
		// [INFO] \- org.example:example-exclusions:jar:3.0.0:compile
		// [INFO]    \- org.example:example-nested:jar:3.3.3:compile
		// [INFO] ------------------------------------------------------------------------
		{
			name:      "exclusions in child and parent dependency management",
			inputFile: filepath.Join("testdata", "exclusions-parent-dependency-management", "child", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:child:3.0.0::f51f7e81",
					Name:         "com.example:child",
					Version:      "3.0.0",
					Licenses:     []string{"Apache 2.0"},
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-exclusions:3.0.0::1e4e34b7",
					Name:         "org.example:example-exclusions",
					Version:      "3.0.0",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 26,
							EndLine:   35,
						},
					},
				},
				{
					ID:           "org.example:example-nested:3.3.3::39880dca",
					Name:         "org.example:example-nested",
					Version:      "3.3.3",
					Relationship: ftypes.RelationshipIndirect,
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:child:3.0.0::f51f7e81",
					DependsOn: []string{
						"org.example:example-exclusions:3.0.0::1e4e34b7",
					},
				},
				{
					ID: "org.example:example-exclusions:3.0.0::1e4e34b7",
					DependsOn: []string{
						"org.example:example-nested:3.3.3::39880dca",
					},
				},
			},
		},
		{
			name:      "exclusions with wildcards",
			inputFile: filepath.Join("testdata", "wildcard-exclusions", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:wildcard-exclusions:4.0.0::87282928",
					Name:         "com.example:wildcard-exclusions",
					Version:      "4.0.0",
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-dependency:1.2.3::4ee336bf",
					Name:         "org.example:example-dependency",
					Version:      "1.2.3",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 14,
							EndLine:   24,
						},
					},
				},
				{
					ID:           "org.example:example-dependency2:2.3.4::d33d5afe",
					Name:         "org.example:example-dependency2",
					Version:      "2.3.4",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 25,
							EndLine:   35,
						},
					},
				},
				{
					ID:           "org.example:example-nested:3.3.3::8253090a",
					Name:         "org.example:example-nested",
					Version:      "3.3.3",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 36,
							EndLine:   46,
						},
					},
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:wildcard-exclusions:4.0.0::87282928",
					DependsOn: []string{
						"org.example:example-dependency2:2.3.4::d33d5afe",
						"org.example:example-dependency:1.2.3::4ee336bf",
						"org.example:example-nested:3.3.3::8253090a",
					},
				},
			},
		},
		{
			name:      "multi module",
			inputFile: filepath.Join("testdata", "multi-module", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:aggregation:1.0.0::d145d452",
					Name:         "com.example:aggregation",
					Version:      "1.0.0",
					Licenses:     []string{"Apache 2.0"},
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "com.example:module:1.1.1::822ec30d",
					Name:         "com.example:module",
					Version:      "1.1.1",
					Licenses:     []string{"Apache 2.0"},
					Relationship: ftypes.RelationshipWorkspace,
				},
				{
					ID:           "org.example:example-dependency:1.2.3::493c9a85",
					Name:         "org.example:example-dependency",
					Version:      "1.2.3",
					Relationship: ftypes.RelationshipDirect,
				},
				{
					ID:           "org.example:example-api:2.0.0::fb4eb559",
					Name:         "org.example:example-api",
					Version:      "2.0.0",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipIndirect,
				},
			},
			// `mvn` doesn't include modules in dep tree of root pom and builds separate graphs.
			// But we have `root` and `workspace` relationships, so we can merge these graphs.
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:aggregation:1.0.0::d145d452",
					DependsOn: []string{
						"com.example:module:1.1.1::822ec30d",
					},
				},
				{
					ID: "com.example:module:1.1.1::822ec30d",
					DependsOn: []string{
						"org.example:example-dependency:1.2.3::493c9a85",
					},
				},
				{
					ID: "org.example:example-dependency:1.2.3::493c9a85",
					DependsOn: []string{
						"org.example:example-api:2.0.0::fb4eb559",
					},
				},
			},
		},
		{
			name:      "multi module with deps with same GAV",
			inputFile: filepath.Join("testdata", "multiple-modules-with-deps-with-same-gav", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:root:1.0.0::436691e6",
					Name:         "com.example:root",
					Version:      "1.0.0",
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "com.example:module1:1.0.0::4c39d72a",
					Name:         "com.example:module1",
					Version:      "1.0.0",
					Relationship: ftypes.RelationshipWorkspace,
				},
				{
					ID:           "com.example:module2:2.0.0::57fc775b",
					Name:         "com.example:module2",
					Version:      "2.0.0",
					Relationship: ftypes.RelationshipWorkspace,
				},
				{
					ID:           "org.example:example-api:1.7.30::80048fd3",
					Name:         "org.example:example-api",
					Version:      "1.7.30",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipDirect,
				},
				{
					ID:           "org.example:example-api:1.7.30::8810f687",
					Name:         "org.example:example-api",
					Version:      "1.7.30",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipDirect,
				},
			},
			//[INFO] --------------------------------[ pom ]---------------------------------
			//[INFO]
			//[INFO] --- dependency:3.7.0:tree (default-cli) @ module1 ---
			//[INFO] com.example:module1:pom:1.0.0
			//[INFO] \- org.example:example-api:jar:1.7.30:compile
			//[INFO] --------------------------------[ pom ]---------------------------------
			//[INFO]
			//[INFO] --- dependency:3.7.0:tree (default-cli) @ module2 ---
			//[INFO] com.example:module2:pom:2.0.0
			//[INFO] \- org.example:example-api:jar:1.7.30:compile
			//[INFO]
			//[INFO] --------------------------------[ pom ]---------------------------------
			//[INFO]
			//[INFO] --- dependency:3.7.0:tree (default-cli) @ root ---
			//[INFO] com.example:root:pom:1.0.0
			//[INFO] ------------------------------------------------------------------------
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:module1:1.0.0::4c39d72a",
					DependsOn: []string{
						"org.example:example-api:1.7.30::80048fd3",
					},
				},
				{
					ID: "com.example:module2:2.0.0::57fc775b",
					DependsOn: []string{
						"org.example:example-api:1.7.30::8810f687",
					},
				},
				{
					ID: "com.example:root:1.0.0::436691e6",
					DependsOn: []string{
						"com.example:module1:1.0.0::4c39d72a",
						"com.example:module2:2.0.0::57fc775b",
					},
				},
			},
		},
		{
			name:      "multi module with similar deps, but different children",
			inputFile: filepath.Join("testdata", "multiple-modules-with-deps-with-same-gav-with-props", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:root:1.0.0::81b56f80",
					Name:         "com.example:root",
					Version:      "1.0.0",
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "com.example:module1:1.0.0::919ee306",
					Name:         "com.example:module1",
					Version:      "1.0.0",
					Relationship: ftypes.RelationshipWorkspace,
				},
				{
					ID:           "com.example:module2:2.0.0::e4f6bb04",
					Name:         "com.example:module2",
					Version:      "2.0.0",
					Relationship: ftypes.RelationshipWorkspace,
				},
				{
					ID:           "org.example:example-dependency:1.2.5::e2ecf3a4",
					Name:         "org.example:example-dependency",
					Version:      "1.2.5",
					Relationship: ftypes.RelationshipDirect,
				},
				{
					ID:           "org.example:example-dependency:1.2.5::e3e3d7fe",
					Name:         "org.example:example-dependency",
					Version:      "1.2.5",
					Relationship: ftypes.RelationshipDirect,
				},
				{
					ID:           "org.example:example-api:1.7.30::a4032585",
					Name:         "org.example:example-api",
					Version:      "1.7.30",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipIndirect,
				},
				{
					ID:           "org.example:example-api:2.0.0::6c475df9",
					Name:         "org.example:example-api",
					Version:      "2.0.0",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipIndirect,
				},
			},
			//[INFO] --------------------------------[ jar ]---------------------------------
			//[INFO]
			//[INFO] --- dependency:3.7.0:tree (default-cli) @ module1 ---
			//[INFO] com.example:module1:jar:1.0.0
			//[INFO] \- org.example:example-dependency:jar:1.2.5:compile
			//[INFO]    \- org.example:example-api:jar:1.7.30:compile
			//[INFO]
			//[INFO] ------------------------< com.example:module2 >-------------------------
			//[INFO] Building module2 2.0.0                                             [2/3]
			//[INFO]   from module2/pom.xml
			//[INFO] --------------------------------[ jar ]---------------------------------
			//[INFO]
			//[INFO] --- dependency:3.7.0:tree (default-cli) @ module2 ---
			//[INFO] com.example:module2:jar:2.0.0
			//[INFO] \- org.example:example-dependency:jar:1.2.5:compile
			//[INFO]    \- org.example:example-api:jar:2.0.0:compile
			//[INFO]
			//[INFO] --------------------------< com.example:root >--------------------------
			//[INFO] Building root 1.0.0                                                [3/3]
			//[INFO]   from pom.xml
			//[INFO] --------------------------------[ pom ]---------------------------------
			//[INFO]
			//[INFO] --- dependency:3.7.0:tree (default-cli) @ root ---
			//[INFO] com.example:root:pom:1.0.0
			//[INFO] ------------------------------------------------------------------------
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:module1:1.0.0::919ee306",
					DependsOn: []string{
						"org.example:example-dependency:1.2.5::e3e3d7fe",
					},
				},
				{
					ID: "com.example:module2:2.0.0::e4f6bb04",
					DependsOn: []string{
						"org.example:example-dependency:1.2.5::e2ecf3a4",
					},
				},
				{
					ID: "com.example:root:1.0.0::81b56f80",
					DependsOn: []string{
						"com.example:module1:1.0.0::919ee306",
						"com.example:module2:2.0.0::e4f6bb04",
					},
				},
				{
					ID: "org.example:example-dependency:1.2.5::e2ecf3a4",
					DependsOn: []string{
						"org.example:example-api:2.0.0::6c475df9",
					},
				},
				{
					ID: "org.example:example-dependency:1.2.5::e3e3d7fe",
					DependsOn: []string{
						"org.example:example-api:1.7.30::a4032585",
					},
				},
			},
		},
		{
			name:      "nested modules",
			inputFile: filepath.Join("testdata", "nested-modules", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:root:1.0.0::1b704e26",
					Name:         "com.example:root",
					Version:      "1.0.0",
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "com.example:module1:1.0.0::59758428",
					Name:         "com.example:module1",
					Version:      "1.0.0",
					Relationship: ftypes.RelationshipWorkspace,
				},
				{
					ID:           "com.example:module2:2.0.0::a36f3d58",
					Name:         "com.example:module2",
					Version:      "2.0.0",
					Relationship: ftypes.RelationshipWorkspace,
				},
				{
					ID:      "org.example:example-api:1.7.30::2946ca63",
					Name:    "org.example:example-api",
					Version: "1.7.30",
					Licenses: []string{
						"The Apache Software License, Version 2.0",
					},
					Relationship: ftypes.RelationshipDirect,
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:module2:2.0.0::a36f3d58",
					DependsOn: []string{
						"org.example:example-api:1.7.30::2946ca63",
					},
				},
				{
					ID: "com.example:root:1.0.0::1b704e26",
					DependsOn: []string{
						"com.example:module1:1.0.0::59758428",
						"com.example:module2:2.0.0::a36f3d58",
					},
				},
			},
		},
		{
			name:      "Infinity loop for modules",
			inputFile: filepath.Join("testdata", "modules-infinity-loop", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "org.example:root:1.0.0::9cfee9e6",
					Name:         "org.example:root",
					Version:      "1.0.0",
					Relationship: ftypes.RelationshipRoot,
				},
				// as module
				{
					ID:           "org.example:module-1:2.0.0::f8434436",
					Name:         "org.example:module-1",
					Version:      "2.0.0",
					Relationship: ftypes.RelationshipWorkspace,
				},
				{
					ID:           "org.example:module-2:3.0.0::70a6381c",
					Name:         "org.example:module-2",
					Version:      "3.0.0",
					Relationship: ftypes.RelationshipWorkspace,
				},
				// as dependency
				{
					ID:           "org.example:module-1:2.0.0::86dd9fb8",
					Name:         "org.example:module-1",
					Version:      "2.0.0",
					Relationship: ftypes.RelationshipDirect,
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "org.example:module-2:3.0.0::70a6381c",
					DependsOn: []string{
						"org.example:module-1:2.0.0::86dd9fb8",
					},
				},
				{
					ID: "org.example:root:1.0.0::9cfee9e6",
					DependsOn: []string{
						"org.example:module-1:2.0.0::f8434436",
						"org.example:module-2:3.0.0::70a6381c",
					},
				},
			},
		},
		{
			name:      "multi module soft requirement",
			inputFile: filepath.Join("testdata", "multi-module-soft-requirement", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:aggregation:1.0.0::d303364d",
					Name:         "com.example:aggregation",
					Version:      "1.0.0",
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "com.example:module1:1.1.1::ede50f46",
					Name:         "com.example:module1",
					Version:      "1.1.1",
					Relationship: ftypes.RelationshipWorkspace,
				},
				{
					ID:           "com.example:module2:1.1.1::ce791b4f",
					Name:         "com.example:module2",
					Version:      "1.1.1",
					Relationship: ftypes.RelationshipWorkspace,
				},
				{
					ID:           "org.example:example-api:1.7.30::5832af90",
					Name:         "org.example:example-api",
					Version:      "1.7.30",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipDirect,
				},
				{
					ID:           "org.example:example-api:2.0.0::95bb5ac5",
					Name:         "org.example:example-api",
					Version:      "2.0.0",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipDirect,
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:aggregation:1.0.0::d303364d",
					DependsOn: []string{
						"com.example:module1:1.1.1::ede50f46",
						"com.example:module2:1.1.1::ce791b4f",
					},
				},
				{
					ID: "com.example:module1:1.1.1::ede50f46",
					DependsOn: []string{
						"org.example:example-api:1.7.30::5832af90",
					},
				},
				{
					ID: "com.example:module2:1.1.1::ce791b4f",
					DependsOn: []string{
						"org.example:example-api:2.0.0::95bb5ac5",
					},
				},
			},
		},
		{
			name:      "overwrite artifact version from dependencyManagement in the root POM",
			inputFile: filepath.Join("testdata", "root-pom-dep-management", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:root-pom-dep-management:1.0.0::6251a251",
					Name:         "com.example:root-pom-dep-management",
					Version:      "1.0.0",
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-nested:3.3.3::99356a85",
					Name:         "org.example:example-nested",
					Version:      "3.3.3",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 20,
							EndLine:   24,
						},
					},
				},
				{
					ID:           "org.example:example-api:2.0.0::ba01a935",
					Name:         "org.example:example-api",
					Version:      "2.0.0",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipIndirect,
				},
				// dependency version is taken from `com.example:root-pom-dep-management` from dependencyManagement
				// not from `com.example:example-nested` from `com.example:example-nested`
				{
					ID:           "org.example:example-dependency:1.2.4::e4bc8e79",
					Name:         "org.example:example-dependency",
					Version:      "1.2.4",
					Relationship: ftypes.RelationshipIndirect,
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:root-pom-dep-management:1.0.0::6251a251",
					DependsOn: []string{
						"org.example:example-nested:3.3.3::99356a85",
					},
				},
				{
					ID: "org.example:example-dependency:1.2.4::e4bc8e79",
					DependsOn: []string{
						"org.example:example-api:2.0.0::ba01a935",
					},
				},
				{
					ID: "org.example:example-nested:3.3.3::99356a85",
					DependsOn: []string{
						"org.example:example-dependency:1.2.4::e4bc8e79",
					},
				},
			},
		},
		{
			name:      "overwrite artifact version from dependencyManagement in the root POM when dependency uses `project.*` props",
			inputFile: filepath.Join("testdata", "root-pom-dep-management-for-deps-with-project-props", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:root-pom-dep-management-for-deps-with-project-props:1.0.0::6c22541d",
					Name:         "com.example:root-pom-dep-management-for-deps-with-project-props",
					Version:      "1.0.0",
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-dependency:1.7.30::6ae4efb4",
					Name:         "org.example:example-dependency",
					Version:      "1.7.30",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 21,
							EndLine:   25,
						},
					},
				},
				{
					ID:           "org.example:example-api:2.0.0::7043f18c",
					Name:         "org.example:example-api",
					Version:      "2.0.0",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipIndirect,
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:root-pom-dep-management-for-deps-with-project-props:1.0.0::6c22541d",
					DependsOn: []string{
						"org.example:example-dependency:1.7.30::6ae4efb4",
					},
				},
				{
					ID: "org.example:example-dependency:1.7.30::6ae4efb4",
					DependsOn: []string{
						"org.example:example-api:2.0.0::7043f18c",
					},
				},
			},
		},
		{
			name:      "transitive dependencyManagement should not be inherited",
			inputFile: filepath.Join("testdata", "transitive-dependency-management", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "org.example:transitive-dependency-management:2.0.0::a4a11976",
					Name:         "org.example:transitive-dependency-management",
					Version:      "2.0.0",
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-dependency-management3:1.1.1::c472e9e4",
					Name:         "org.example:example-dependency-management3",
					Version:      "1.1.1",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 14,
							EndLine:   18,
						},
					},
				},
				// Managed dependencies (org.example:example-api:1.7.30) in org.example:example-dependency-management3
				// should not affect dependencies of example-dependency (org.example:example-api:2.0.0)
				{
					ID:           "org.example:example-api:2.0.0::bd947ff8",
					Name:         "org.example:example-api",
					Version:      "2.0.0",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipIndirect,
				},
				{
					ID:           "org.example:example-dependency:1.2.3::a4863849",
					Name:         "org.example:example-dependency",
					Version:      "1.2.3",
					Relationship: ftypes.RelationshipIndirect,
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "org.example:example-dependency-management3:1.1.1::c472e9e4",
					DependsOn: []string{
						"org.example:example-dependency:1.2.3::a4863849",
					},
				},
				{
					ID: "org.example:example-dependency:1.2.3::a4863849",
					DependsOn: []string{
						"org.example:example-api:2.0.0::bd947ff8",
					},
				},
				{
					ID: "org.example:transitive-dependency-management:2.0.0::a4a11976",
					DependsOn: []string{
						"org.example:example-dependency-management3:1.1.1::c472e9e4",
					},
				},
			},
		},
		{
			name:      "parent not found",
			inputFile: filepath.Join("testdata", "not-found-parent", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:no-parent:1.0-SNAPSHOT::32ac5060",
					Name:         "com.example:no-parent",
					Version:      "1.0-SNAPSHOT",
					Licenses:     []string{"Apache 2.0"},
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-api:1.7.30::d09fe727",
					Name:         "org.example:example-api",
					Version:      "1.7.30",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 27,
							EndLine:   31,
						},
					},
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:no-parent:1.0-SNAPSHOT::32ac5060",
					DependsOn: []string{
						"org.example:example-api:1.7.30::d09fe727",
					},
				},
			},
		},
		{
			name:      "dependency not found",
			inputFile: filepath.Join("testdata", "not-found-dependency", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:not-found-dependency:1.0.0::e52fae70",
					Name:         "com.example:not-found-dependency",
					Version:      "1.0.0",
					Licenses:     []string{"Apache 2.0"},
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-not-found:999::af293727",
					Name:         "org.example:example-not-found",
					Version:      "999",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 21,
							EndLine:   25,
						},
					},
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:not-found-dependency:1.0.0::e52fae70",
					DependsOn: []string{
						"org.example:example-not-found:999::af293727",
					},
				},
			},
		},
		{
			name:      "module not found - unable to parse module",
			inputFile: filepath.Join("testdata", "not-found-module", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:aggregation:1.0.0::f8aa669d",
					Name:         "com.example:aggregation",
					Version:      "1.0.0",
					Licenses:     []string{"Apache 2.0"},
					Relationship: ftypes.RelationshipRoot,
				},
			},
		},
		{
			name:      "multiply licenses",
			inputFile: filepath.Join("testdata", "multiply-licenses", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:      "com.example:multiply-licenses:1.0.0::22612a3a",
					Name:    "com.example:multiply-licenses",
					Version: "1.0.0",
					Licenses: []string{
						"MIT",
						"Apache 2.0",
					},
					Relationship: ftypes.RelationshipRoot,
				},
			},
		},
		{
			name:      "inherit parent license",
			inputFile: filepath.Join("testdata", "inherit-license", "module", "submodule", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example.app:submodule:1.0.0::3a92b985",
					Name:         "com.example.app:submodule",
					Version:      "1.0.0",
					Licenses:     []string{"Apache-2.0"},
					Relationship: ftypes.RelationshipRoot,
				},
			},
		},
		{
			name:      "compare ArtifactIDs for base and parent pom's",
			inputFile: filepath.Join("testdata", "no-parent-infinity-loop", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:child:1.0.0::142e8eb6",
					Name:         "com.example:child",
					Version:      "1.0.0",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipRoot,
				},
			},
		},
		{
			name:      "dependency without version",
			inputFile: filepath.Join("testdata", "dep-without-version", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:dep-without-version:1.0.0::e1cb81d9",
					Name:         "com.example:dep-without-version",
					Version:      "1.0.0",
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-api::35b5f95d",
					Name:         "org.example:example-api",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 19,
							EndLine:   22,
						},
					},
				},
			},
		},
		// [INFO] com.example:root-depManagement-in-parent:jar:1.0.0
		// [INFO] \- org.example:example-dependency:jar:2.0.0:compile
		// [INFO]    \- org.example:example-api:jar:1.0.1:compile
		{
			name:      "dependency from parent uses version from root pom depManagement",
			inputFile: filepath.Join("testdata", "use-root-dep-management-in-parent", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:root-depManagement-in-parent:1.0.0::675b2635",
					Name:         "com.example:root-depManagement-in-parent",
					Version:      "1.0.0",
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-dependency:2.0.0::310f08f9",
					Name:         "org.example:example-dependency",
					Version:      "2.0.0",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 25,
							EndLine:   29,
						},
					},
				},
				{
					ID:           "org.example:example-api:1.0.1::343ac628",
					Name:         "org.example:example-api",
					Version:      "1.0.1",
					Relationship: ftypes.RelationshipIndirect,
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:root-depManagement-in-parent:1.0.0::675b2635",
					DependsOn: []string{
						"org.example:example-dependency:2.0.0::310f08f9",
					},
				},
				{
					ID: "org.example:example-dependency:2.0.0::310f08f9",
					DependsOn: []string{
						"org.example:example-api:1.0.1::343ac628",
					},
				},
			},
		},
		// [INFO] com.example:root-depManagement-in-parent:jar:1.0.0
		// [INFO] \- org.example:example-dependency:jar:2.0.0:compile
		// [INFO]    \- org.example:example-api:jar:2.0.1:compile
		{
			name:      "dependency from parent uses version from child pom depManagement",
			inputFile: filepath.Join("testdata", "use-dep-management-from-child-in-parent", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:root-depManagement-in-parent:1.0.0::7d38e0ad",
					Name:         "com.example:root-depManagement-in-parent",
					Version:      "1.0.0",
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-dependency:2.0.0::329a1653",
					Name:         "org.example:example-dependency",
					Version:      "2.0.0",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 15,
							EndLine:   19,
						},
					},
				},
				{
					ID:           "org.example:example-api:2.0.1::187df2ac",
					Name:         "org.example:example-api",
					Version:      "2.0.1",
					Relationship: ftypes.RelationshipIndirect,
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:root-depManagement-in-parent:1.0.0::7d38e0ad",
					DependsOn: []string{
						"org.example:example-dependency:2.0.0::329a1653",
					},
				},
				{
					ID: "org.example:example-dependency:2.0.0::329a1653",
					DependsOn: []string{
						"org.example:example-api:2.0.1::187df2ac",
					},
				},
			},
		},
		// [INFO] com.example:child-depManagement-in-parent:jar:1.0.0
		// [INFO] +- org.example:example-api2:jar:1.0.2:runtime
		// [INFO] +- org.example:example-api3:jar:4.0.3:compile
		// [INFO] \- org.example:example-api:jar:1.0.1:compile
		{
			name:      "dependency from parent uses version from child(scanned) pom depManagement",
			inputFile: filepath.Join("testdata", "use-child-dep-management-in-parent", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:child-depManagement-in-parent:1.0.0::e8d75880",
					Name:         "com.example:child-depManagement-in-parent",
					Version:      "1.0.0",
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-api:1.0.1::5e5fc05f",
					Name:         "org.example:example-api",
					Version:      "1.0.1",
					Relationship: ftypes.RelationshipDirect,
				},
				{
					ID:           "org.example:example-api2:1.0.2::e378c24d",
					Name:         "org.example:example-api2",
					Version:      "1.0.2",
					Relationship: ftypes.RelationshipDirect,
				},
				{
					ID:           "org.example:example-api3:4.0.3::f92a10e6",
					Name:         "org.example:example-api3",
					Version:      "4.0.3",
					Relationship: ftypes.RelationshipDirect,
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:child-depManagement-in-parent:1.0.0::e8d75880",
					DependsOn: []string{
						"org.example:example-api2:1.0.2::e378c24d",
						"org.example:example-api3:4.0.3::f92a10e6",
						"org.example:example-api:1.0.1::5e5fc05f",
					},
				},
			},
		},
		// [INFO] com.example:inherit-scopes-from-child-deps-and-their-parents:jar:0.0.1
		// [INFO] +- org.example:example-nested-scope-runtime:jar:1.0.0:runtime
		// [INFO] |  \- org.example:example-scope-runtime:jar:2.0.0:runtime
		// [INFO] |     \- org.example:example-api-runtime:jar:3.0.0:runtime
		// [INFO] +- org.example:example-nested-scope-compile:jar:1.0.0:compile
		// [INFO] |  \- org.example:example-scope-compile:jar:2.0.0:compile
		// [INFO] |     \- org.example:example-api-compile:jar:3.0.0:compile
		// [INFO] \- org.example:example-nested-scope-empty:jar:1.0.0:compile
		// [INFO]    \- org.example:example-scope-empty:jar:2.0.0:compile
		// [INFO]       \- org.example:example-api-empty:jar:3.0.0:compile
		//
		// `example-nested-*" dependencies and their parents contain `dependencyManagement` with changed scopes
		{
			name:      "inherit scopes from child dependencies and their parents",
			inputFile: filepath.Join("testdata", "inherit-scopes-from-child-deps-and-their-parents", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:inherit-scopes-from-child-deps-and-their-parents:0.0.1::29dfa51e",
					Name:         "com.example:inherit-scopes-from-child-deps-and-their-parents",
					Version:      "0.0.1",
					Relationship: ftypes.RelationshipRoot,
				},
				exampleNestedScopeCompile("c5c1ec8f", 16, 21),
				exampleNestedScopeEmpty("2e0c37ea", 22, 26),
				exampleNestedScopeRuntime("98ee0b26", 10, 15),
				exampleApiCompile("d4015fba"),
				exampleApiEmpty("9575d06c"),
				exampleApiRuntime("91cf1740"),
				exampleScopeCompile("e168f2d0"),
				exampleScopeEmpty("af2c22db"),
				exampleScopeRuntime("acf8ee16"),
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:inherit-scopes-from-child-deps-and-their-parents:0.0.1::29dfa51e",
					DependsOn: []string{
						"org.example:example-nested-scope-compile:1.0.0::c5c1ec8f",
						"org.example:example-nested-scope-empty:1.0.0::2e0c37ea",
						"org.example:example-nested-scope-runtime:1.0.0::98ee0b26",
					},
				},
				{
					ID: "org.example:example-nested-scope-compile:1.0.0::c5c1ec8f",
					DependsOn: []string{
						"org.example:example-scope-compile:2.0.0::e168f2d0",
					},
				},
				{
					ID: "org.example:example-nested-scope-empty:1.0.0::2e0c37ea",
					DependsOn: []string{
						"org.example:example-scope-empty:2.0.0::af2c22db",
					},
				},
				{
					ID: "org.example:example-nested-scope-runtime:1.0.0::98ee0b26",
					DependsOn: []string{
						"org.example:example-scope-runtime:2.0.0::acf8ee16",
					},
				},
				{
					ID: "org.example:example-scope-compile:2.0.0::e168f2d0",
					DependsOn: []string{
						"org.example:example-api-compile:3.0.0::d4015fba",
					},
				},
				{
					ID: "org.example:example-scope-empty:2.0.0::af2c22db",
					DependsOn: []string{
						"org.example:example-api-empty:3.0.0::9575d06c",
					},
				},
				{
					ID: "org.example:example-scope-runtime:2.0.0::acf8ee16",
					DependsOn: []string{
						"org.example:example-api-runtime:3.0.0::91cf1740",
					},
				},
			},
		},
		// [INFO] com.example:inherit-scopes-in-parents-from-root:jar:0.1.0
		// [INFO] +- org.example:example-nested-scope-runtime:jar:1.0.0:runtime
		// [INFO] |  \- org.example:example-scope-runtime:jar:2.0.0:compile
		// [INFO] |     \- org.example:example-api-runtime:jar:3.0.0:runtime
		// [INFO] +- org.example:example-nested-scope-compile:jar:1.0.0:compile
		// [INFO] |  \- org.example:example-scope-compile:jar:2.0.0:runtime
		// [INFO] |     \- org.example:example-api-compile:jar:3.0.0:test
		// [INFO] \- org.example:example-nested-scope-empty:jar:1.0.0:compile
		// [INFO]    \- org.example:example-scope-empty:jar:2.0.0:runtime
		// [INFO]       \- org.example:example-api-empty:jar:3.0.0:test
		//
		// `example-nested-*" dependencies and their parents contain `dependencyManagement` with changed scopes
		// scopes from `dependencyManagement` of root pom are used
		{
			name:      "inherit scopes in children from root pom",
			inputFile: filepath.Join("testdata", "inherit-scopes-in-children-from-root", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:inherit-scopes-in-children-from-root:0.0.1::3dbc8566",
					Name:         "com.example:inherit-scopes-in-children-from-root",
					Version:      "0.0.1",
					Relationship: ftypes.RelationshipRoot,
				},
				exampleNestedScopeCompile("e66ec05e", 51, 56),
				exampleNestedScopeEmpty("4c11808b", 57, 61),
				exampleNestedScopeRuntime("61fda3e9", 45, 50),
				exampleApiRuntime("95f677d8"),
				exampleScopeCompile("1d3ae149"),
				exampleScopeEmpty("7e01cb21"),
				exampleScopeRuntime("aaaa5004"),
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:inherit-scopes-in-children-from-root:0.0.1::3dbc8566",
					DependsOn: []string{
						"org.example:example-nested-scope-compile:1.0.0::e66ec05e",
						"org.example:example-nested-scope-empty:1.0.0::4c11808b",
						"org.example:example-nested-scope-runtime:1.0.0::61fda3e9",
					},
				},
				{
					ID: "org.example:example-nested-scope-compile:1.0.0::e66ec05e",
					DependsOn: []string{
						"org.example:example-scope-compile:2.0.0::1d3ae149",
					},
				},
				{
					ID: "org.example:example-nested-scope-empty:1.0.0::4c11808b",
					DependsOn: []string{
						"org.example:example-scope-empty:2.0.0::7e01cb21",
					},
				},
				{
					ID: "org.example:example-nested-scope-runtime:1.0.0::61fda3e9",
					DependsOn: []string{
						"org.example:example-scope-runtime:2.0.0::aaaa5004",
					},
				},
				{
					ID: "org.example:example-scope-runtime:2.0.0::aaaa5004",
					DependsOn: []string{
						"org.example:example-api-runtime:3.0.0::95f677d8",
					},
				},
			},
		},
		// [INFO] com.example:inherit-scopes-in-parents-from-root:jar:0.1.0
		// [INFO] +- org.example:example-nested-scope-runtime:jar:1.0.0:runtime
		// [INFO] |  \- org.example:example-scope-runtime:jar:2.0.0:compile
		// [INFO] |     \- org.example:example-api-runtime:jar:3.0.0:runtime
		// [INFO] +- org.example:example-nested-scope-compile:jar:1.0.0:compile
		// [INFO] |  \- org.example:example-scope-compile:jar:2.0.0:runtime
		// [INFO] |     \- org.example:example-api-compile:jar:3.0.0:test
		// [INFO] \- org.example:example-nested-scope-empty:jar:1.0.0:test
		// [INFO]    \- org.example:example-scope-empty:jar:2.0.0:test
		// [INFO]       \- org.example:example-api-empty:jar:3.0.0:test
		//
		// `example-nested-*" dependencies and their parents contain `dependencyManagement` with changed scopes
		// scopes from `dependencyManagement` of root pom are used in parent dependencies
		{
			name:      "inherit scopes in parent from root pom",
			inputFile: filepath.Join("testdata", "inherit-scopes-in-parents-from-root", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:inherit-scopes-in-parents-from-root:0.1.0::ac1ed632",
					Name:         "com.example:inherit-scopes-in-parents-from-root",
					Version:      "0.1.0",
					Relationship: ftypes.RelationshipRoot,
				},
				exampleNestedScopeCompile("4ce69e4d", 0, 0),
				exampleNestedScopeRuntime("9660d657", 0, 0),
				exampleApiRuntime("efcdf95e"),
				exampleScopeCompile("c30b48fb"),
				exampleScopeRuntime("ea3219cb"),
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:inherit-scopes-in-parents-from-root:0.1.0::ac1ed632",
					DependsOn: []string{
						"org.example:example-nested-scope-compile:1.0.0::4ce69e4d",
						"org.example:example-nested-scope-runtime:1.0.0::9660d657",
					},
				},
				{
					ID: "org.example:example-nested-scope-compile:1.0.0::4ce69e4d",
					DependsOn: []string{
						"org.example:example-scope-compile:2.0.0::c30b48fb",
					},
				},
				{
					ID: "org.example:example-nested-scope-runtime:1.0.0::9660d657",
					DependsOn: []string{
						"org.example:example-scope-runtime:2.0.0::ea3219cb",
					},
				},
				{
					ID: "org.example:example-scope-runtime:2.0.0::ea3219cb",
					DependsOn: []string{
						"org.example:example-api-runtime:3.0.0::efcdf95e",
					},
				},
			},
		},
		//[INFO] com.example:root-pom-with-spaces:jar:1.0.0
		//[INFO] \- org.example:example-nested:jar:3.3.3:compile
		//[INFO]    \- org.example:example-dependency:jar:1.2.4:compile
		//[INFO]       \- org.example:example-api:jar:2.0.0:compile
		{
			name:      "space at the start and/or end of the text nodes",
			inputFile: filepath.Join("testdata", "with-spaces", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:root-pom-with-spaces:1.0.0::eae09abe",
					Name:         "com.example:root-pom-with-spaces",
					Version:      "1.0.0",
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-nested:3.3.3::11f4a96e",
					Name:         "org.example:example-nested",
					Version:      "3.3.3",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 24,
							EndLine:   28,
						},
					},
				},
				{
					ID:           "org.example:example-api:2.0.0::c9934860",
					Name:         "org.example:example-api",
					Version:      "2.0.0",
					Licenses:     []string{"The Apache Software License, Version 2.0"},
					Relationship: ftypes.RelationshipIndirect,
				},
				// dependency version is taken from `com.example:root-pom-with-spaces` from dependencyManagement
				// not from `com.example:example-nested` from `com.example:example-nested`
				{
					ID:           "org.example:example-dependency:1.2.4::13e3505f",
					Name:         "org.example:example-dependency",
					Version:      "1.2.4",
					Relationship: ftypes.RelationshipIndirect,
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:root-pom-with-spaces:1.0.0::eae09abe",
					DependsOn: []string{
						"org.example:example-nested:3.3.3::11f4a96e",
					},
				},
				{
					ID: "org.example:example-dependency:1.2.4::13e3505f",
					DependsOn: []string{
						"org.example:example-api:2.0.0::c9934860",
					},
				},
				{
					ID: "org.example:example-nested:3.3.3::11f4a96e",
					DependsOn: []string{
						"org.example:example-dependency:1.2.4::13e3505f",
					},
				},
			},
		},
		// `mvn` can take values from multiple dependencyManagement sections (from both the root and parent POMs).
		// However, it does not override the `test` scope defined in the parent POM.
		// [INFO] --- dependency:3.7.0:tree (default-cli) @ get-fields-from-multiple-depmanagements ---
		// [INFO] com.example:get-fields-from-multiple-depmanagements:jar:1.0.0
		// [INFO] \- org.example:example-dependency:jar:4.0.0:compile
		// [INFO]    +- org.example:example-api4:jar:4.0.0:compile
		// [INFO]    +- org.example:example-api5:jar:4.0.0:test
		// [INFO]    \- org.example:example-api6:jar:1.7.30:runtime
		// [INFO] ------------------------------------------------------------------------
		{
			name:      "don't overwrite test scope from upper depManagement",
			inputFile: filepath.Join("testdata", "get-fields-from-multiple-depmanagements", "pom.xml"),
			local:     true,
			want: []ftypes.Package{
				{
					ID:           "com.example:get-fields-from-multiple-depmanagements:1.0.0::6c3b7d0c",
					Name:         "com.example:get-fields-from-multiple-depmanagements",
					Version:      "1.0.0",
					Relationship: ftypes.RelationshipRoot,
				},
				{
					ID:           "org.example:example-dependency:4.0.0::1c05143b",
					Name:         "org.example:example-dependency",
					Version:      "4.0.0",
					Relationship: ftypes.RelationshipDirect,
					Locations: ftypes.Locations{
						{
							StartLine: 30,
							EndLine:   34,
						},
					},
				},
				{
					ID:           "org.example:example-api4:4.0.0::faae46bb",
					Name:         "org.example:example-api4",
					Version:      "4.0.0",
					Relationship: ftypes.RelationshipIndirect,
				},
				{
					ID:           "org.example:example-api6:1.7.30::779e4060",
					Name:         "org.example:example-api6",
					Version:      "1.7.30",
					Relationship: ftypes.RelationshipIndirect,
				},
			},
			wantDeps: []ftypes.Dependency{
				{
					ID: "com.example:get-fields-from-multiple-depmanagements:1.0.0::6c3b7d0c",
					DependsOn: []string{
						"org.example:example-dependency:4.0.0::1c05143b",
					},
				},
				{
					ID: "org.example:example-dependency:4.0.0::1c05143b",
					DependsOn: []string{
						"org.example:example-api4:4.0.0::faae46bb",
						"org.example:example-api6:1.7.30::779e4060",
					},
				},
			},
		},
	}
	for _, tt := range tests {
		t.Run(tt.name, func(t *testing.T) {
			f, err := os.Open(tt.inputFile)
			require.NoError(t, err)
			defer f.Close()

			var defaultRepo string
			var settingsRepos []string
			if tt.local {
				// for local repository
				t.Setenv("MAVEN_HOME", "testdata/settings/global")
			} else {
				// for remote repository
				h := http.FileServer(http.Dir(filepath.Join("testdata", "repository")))
				ts := httptest.NewServer(h)
				defaultRepo = ts.URL

				// Enable custom repository to be sure in repository order checking
				if tt.enableRepoForSettingsRepo {
					ch := http.FileServer(http.Dir(filepath.Join("testdata", "repository-for-settings-repo")))
					cts := httptest.NewServer(ch)
					settingsRepos = []string{cts.URL}
				}
			}

			p := pom.NewParser(tt.inputFile, pom.WithDefaultRepo(defaultRepo, true, true),
				pom.WithSettingsRepos(settingsRepos, true, false), pom.WithOffline(tt.offline))

			gotPkgs, gotDeps, err := p.Parse(t.Context(), f)
			if tt.wantErr != "" {
				require.ErrorContains(t, err, tt.wantErr)
				return
			}
			require.NoError(t, err)

			assert.Equal(t, tt.want, gotPkgs)
			assert.Equal(t, tt.wantDeps, gotDeps)
		})
	}
}