More context w.r.t above request:

• Recently we have observed that in AndroidBuildTools repo (which helps to download 3rd party packages for OMR from web and add to office-feed , so that OMR products can use them since OMR repo has offline-build) , packages defined in ‘maven’ ecosystem are not getting detected by ComponentGovernance tool, and on further debugging its observed that AndroidBuildTools repo uses “.pom” files for maven dependencies info & CG support only ‘pom.xml’ file for Maven ecosystem.
• To ensure Repos which uses ".pom" config file for maven ecosystem, raising this new request on 'parsing .pom file' so that we'll be security-compliant in these repos too.(eg:AndroidBuildTools)