Reproducing a Maven Central Release from a single GAV coordinate

[yasser lazrek]

Hello,

As part of a build-from-source initiative, I am working on a top-down
strategy to build project dependencies from source. Often, when trying to
build a particular dependency, the only information available is its Maven
GAV (Group ID, Artifact ID, and Version) coordinate.

My question is: Given just a GAV coordinate, how can I reliably identify
the full list of related GAVs that were included in the upstream release of
that single GAV? The goal is to reproduce the released binary artifact by
building from the upstream source (using its repository URL and a specific
commit hash or release tag), and to ensure that the output matches exactly
what was published on Maven Central.

Are there recommended tools or best practices to trace the complete set of
artifacts and metadata associated with an original Maven Central release
that can cover the majority of artifacts(GAVs) on Maven Central, solely
from its GAV? Any advice or pointers would be greatly appreciated.

Thank you for your insights!

Best regards,
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-general/attachments/20250829/38d8c01a/attachment.htm>