feat: Recommend dependency analytics extension

[arajkumar]

Changes are inspired by https://github.com/microsoft/vscode-java-pack/tree/master/src/recommendation.

Fixes #1763 https://issues.redhat.com/browse/APPAI-1628

[rgrunber]

Overall, looks fine. Just had one suggestion about avoiding excessive checks in the callbacks.

I also tried this on project with a large amount of poms ( https://git.eclipse.org/c/orbit/orbit-recipes.git/tree/ ) and it hit a timeout exception :

Failed to trigger application's stack analysis, try in a while. Status: 408 - REQUEST TIMEOUT

The analytics page came back empty with just the text "Unable to analyze your stack." . If this is expected in more extreme cases then I guess that's fine for now.

[rgrunber]

Thanks for addressing the issues.

I've tested each case, in addition to installing/uninstalling the analytics independent of the recommendation code. It seems to be doing the right thing each time.

Can you just squash the commits into 1 and then we can merge this.

UPDATE : I'll take care of the formatting.

[rgrunber]

Merged as bdacd43 .

[arajkumar]

Can you just squash the commits into 1 and then we can merge this.

Usually we (in our team) prefer to do squash merge offered from Github., but I'm not sure whether it does signed commits. :)

Thanks for review this.