How to upgrade the fingerprints if one open source has new version?

[rell...@gmail.com]

If one open source releases a new version, can OSS discovery detect the new version with the current fingerprints?

How often fingerprints would be updated according to open source change?

[Eric Weidner]

The matching types used by OSS Discovery are generic and will span versions.  For instance, for commons-logging-2.0.jar, the name match type will match <commons-logging> and the version matcher will pull what looks like a version <2.0> or any other version.  Also, if the match is made using a namespace match (org.apache.commons.collection), that also is information that spans all versions.

Eric