:bug: Link java dependencies that don't have a sha

[sjd78]

Resolves: #1982

In some analysis cases, java dependencies may be generated with the full name (group id + artifact id) and version but lack a sha value. When this occurs, a maven central search string can still be created.

Now, for any java dependency, link to maven central:

• Use the dependency's sha, or
• Use the name and version