One of the ecosystems that often has large dependency graphs is Java, especially in the Maven ecosystem. Syft should be able to represent a full dependency graph for Maven projects (pom.xml). These dependencies should have full transitive graph information conveyed in the Syft output.

We need to add dependency relationship types to the Java catalogers.

This issue is tracking Java dependencies of the larger epic.