The updated version of this repository is https://github.com/secure-software-engineering/achilles-benchmark-depscanners
Which test cases (feature combinations and vulnerabilities) shall we generate?
- original GAV, with md, single jar, original classes
- modified GAV, with md (the modified), single jar, recompiled
- random GAV, with md, uber jar, original classes (java stand-alone, self-contained case)
- random GAV, without md, uber jar, original classes (java stand-alone, self-contained case)
- random GAV, with md, uber jar, re-packaged classes (agent case, to avoid conflicts with instrumented app) 2-5) * 2 (with vulnerable code where known, with all code for other archives), (without vulnerable code where known, with all code for other archives)