We maintain a copy of the jacocoant jar in ext/jacocoant.jar (version unknown) and it is used by the qa test suite.

This version :

a) need updating to the latest version namely 0.8.8 (if it's CVE free);

b) we need to get the dependency via maven so that it doesn't become out of date and so that we know which version of the jar we are using.

Node that we also run code coverage on the various maven modules but we use the latest jacoco version for those (see ./code-coverage/pom.xml).