maven-heaven: Implement Maven Heaven solution

The Apache Maven Central repository is the center of the Java development world, where all open source dependencies are fetched from. Apache Maven Central hosts over 3 million Java packages. Java JAR origin metadata and licensing documentation is declared by their authors as part of a POM metadata, but can be misleading and/or incorrect. Accurate Java origin and license metadata are essential to safely automate the consumption of Java packages in the software supply chain.

The solution to this is to lift the trust in Maven packages and work to fix this problem in multiple steps: Scan, review, curate and fix the metadata of the most popular Java packages. Release this data as open data, and work with the Maven community to provide the data as part of the Maven services and repo, cross-check and report code borrowing and reuse between Java projects.