We already support scanning of UberJars, which is a Jar file that contains many other Jar files, that in turn each may contain other Jar files. Xray works in many different ways, including Checksum and ComponentID. For each package type, we have a specific way to detect and recursively open it layer by layer. We show a complete dependency tree for each UberJar.