Sebastian Schuberth

> Why not - although I would do that after 1.0.0 is out. What's the ETA for that?

It was simply telling me "no answer found" for matchers that were matching before. But what is wild is that now that I have a fix in place, I reverted...

It probably makes sense to implement https://github.com/oss-review-toolkit/ort/issues/6972 first.

> Multiple package configurations from different sources should already be allowed since [#5334](https://github.com/oss-review-toolkit/ort/pull/5334). Right, but not if they apply to the same ID / provenance. The mentioned [check is still...

> Changing just the UI text in the report to policy violations would be ok for me, if we do not propagate the name change into code variables. Yes, I'm...

@tsteenbe any plans to continue here?

I'm not an expert here either, but I believe the best way to automatically create reachability metadata is to create a workflow that uses https://github.com/graalvm/setup-graalvm and runs tests under GraalVM...

> How can this goal be enforced such that this build fails without the change? Maybe by adding a UTF-8 encoded test asset, plus a test that reads the file...

To my understanding there is no technical restriction why Grable plugin and Graal releases must be synced. As Graal releases don't come too often, and the plugin might have received...

@fmeum please rebase to resolve conflicts.