code: protected boolean isShadedJar(Dependency dependency, Dependency nextDependency) {
          if (dependency == null || dependency.getFileName() == null
                  || nextDependency == null || nextDependency.getFileName() == null
                  || dependency.getSoftwareIdentifiers().isEmpty()
                  || nextDependency.getSoftwareIdentifiers().isEmpty()) {
              return false;
          }
          final String mainName = dependency.getFileName().toLowerCase();
          final String nextName = nextDependency.getFileName().toLowerCase();
          if (mainName.endsWith(".jar") && nextName.endsWith("pom.xml")) {
              return dependency.getSoftwareIdentifiers().containsAll(nextDependency.getSoftwareIdentifiers());
          } else if (nextName.endsWith(".jar") && mainName.endsWith("pom.xml")) {
              return nextDependency.getSoftwareIdentifiers().containsAll(dependency.getSoftwareIdentifiers());
          }
          return false;
      }
docs: Determines if the jar is shaded and the created pom.xml identified the
  same CPE as the jar - if so, the pom.xml dependency should be removed.
  
  @param dependency a dependency to check
  @param nextDependency another dependency to check
  @return true if on of the dependencies is a pom.xml and the identifiers
  between the two collections match; otherwise false