Skip to content

Add mimir evaluation to the hermetic-builds-blind-spot post - #101

Open
algomaster99 wants to merge 1 commit into
mainfrom
claude/maven-hermetic-builds-mimir-update
Open

Add mimir evaluation to the hermetic-builds-blind-spot post#101
algomaster99 wants to merge 1 commit into
mainfrom
claude/maven-hermetic-builds-mimir-update

Conversation

@algomaster99

@algomaster99 algomaster99 commented Aug 14, 2026

Copy link
Copy Markdown
Member

Summary

  • Adds a new section, "An existing extension gets close, but isn't built for this," evaluating mimir against the same reproduction as the rest of the post.
  • Finding: mimir's resolving log does observe all 8 dynamically-resolved Surefire-provider-chain artifacts, since it intercepts below the declared dependency graph rather than reading the POM. But it's not a substitute for what a lockfile needs — no trigger (plugin) attribution, no static/dynamic split (239 log rows in the check vs. the 8 that matter), and no checksum/lockfile-shaped output.
  • (PR Add post: The Dependency Your Build Downloads That No Maven Tool Will Show You #100, adding the original post, has since merged into main — this PR now targets that and only adds the new section.)

Test plan

  • Render/preview the markdown to confirm formatting
  • Confirm the mimir link resolves

…iles

Checked mimir's resolving log against the same reproduction. It observes
all 8 dynamically-resolved artifacts (it intercepts below the connector,
not the declared graph), but has no trigger attribution, no static/dynamic
split, and isn't checksum/lockfile-shaped output.
@algomaster99
algomaster99 force-pushed the claude/maven-hermetic-builds-mimir-update branch from 3d4afdc to dd7f376 Compare August 14, 2026 22:23
@algomaster99 algomaster99 changed the title Add post: The Dependency Your Build Downloads That No Maven Tool Will Show You (+ mimir evaluation) Add mimir evaluation to the hermetic-builds-blind-spot post Aug 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants