code: private void analyzeSetVersionCommand(Dependency dependency, Engine engine, String contents) {
          Dependency currentDep = dependency;
  
          final Matcher m = SET_VERSION.matcher(contents);
          int count = 0;
          while (m.find()) {
              count++;
              LOGGER.debug("Found project command match with {} groups: {}",
                      m.groupCount(), m.group(0));
              String product = m.group(1);
              final String version = m.group(2);
              LOGGER.debug("Group 1: {}", product);
              LOGGER.debug("Group 2: {}", version);
              final String aliasPrefix = "ALIASOF_";
              if (product.startsWith(aliasPrefix)) {
                  product = product.replaceFirst(aliasPrefix, "");
              }
              if (count > 1) {
                  //TODO - refactor so we do not assign to the parameter (checkstyle)
                  currentDep = new Dependency(dependency.getActualFile());
                  currentDep.setEcosystem(DEPENDENCY_ECOSYSTEM);
                  final String filePath = String.format("%s:%s", dependency.getFilePath(), product);
                  currentDep.setFilePath(filePath);
  
                  currentDep.setSha1sum(Checksum.getSHA1Checksum(filePath));
                  currentDep.setSha256sum(Checksum.getSHA256Checksum(filePath));
                  currentDep.setMd5sum(Checksum.getMD5Checksum(filePath));
                  engine.addDependency(currentDep);
              }
              final String source = currentDep.getFileName();
              currentDep.addEvidence(EvidenceType.PRODUCT, source, "Product", product, Confidence.MEDIUM);
              currentDep.addEvidence(EvidenceType.VENDOR, source, "Vendor", product, Confidence.MEDIUM);
              currentDep.addEvidence(EvidenceType.VERSION, source, "Version", version, Confidence.MEDIUM);
              currentDep.setName(product);
              currentDep.setVersion(version);
          }
          LOGGER.debug("Found {} matches.", count);
      }
docs: Extracts the version information from the contents. If more then one
  version is found additional dependencies are added to the dependency
  list.
  
  @param dependency the dependency being analyzed
  @param engine the dependency-check engine
  @param contents the version information