purl is not deterministic in java-archive cataloger

[TimBrown1611]

What happened:
when i scan a file (.war) I get different results each scan.
please find below:
pkg:maven/org.glassfish.jaxb/[email protected]
pkg:maven/com.sun.xml.bind/[email protected]
What you expected to happen:
same result each time
Steps to reproduce the issue:
the file is too big to share here, however please let me know what other details i can provide to help and investigate it.
Anything else we need to know?:
it impacts the number of results I get from syft.
Environment:

• Output of syft version: 1.17.0
• OS (e.g: cat /etc/os-release or similar): mac