Matt Donoughe
Matt Donoughe
`~= 0.3` is a version requirement, not a version number. Most PURL parsers should be able to parse this PURL correctly, but it's conceptually invalid because there is no package...
Yeah. I think it would be appropriate for GitHub to document what happens if you pass in a type that they don't support, but for the PURL spec to specify...
Related: #38 Is this talking about a JSON schema (a schema that is JSON) or [JSON Schema](https://json-schema.org/) (a specific meta schema for specifying JSON objects)? How will the schema express...
According to Stack Overflow, [you cannot install a specific version](https://stackoverflow.com/q/3987683). `pkg:brew/postgresql%[email protected]` means version 16.1 of Postgres from the postgresql@16 package, which is useful for answering "what's installed?", but apparently not...
I think it's important for this PR to add entries to the test suite. Package names can contain the `@` character and this is not handled correctly by maennchen/purl (https://github.com/maennchen/purl/issues/10)...
`repository_url` itself doesn't need to have enough information to reconstruct the link. There is already a qualifier for the architecture, which has a special value "source" for indicating that it's...
If resolving packages from `deb [arch=amd64] https://apt.bell-sw.com/ stable main` results in requests to `https://apt.bell-sw.com/dists/stable/Release`, I don't think it makes sense for the repository_url to be `https://apt.bell-sw.com/dists/stable/main/`. It could maybe be...
This test should be added to the test suite: ```json { "description": "valid cpan purl", "purl": "pkg:cpan/LWP%3A%3AUserAgent", "canonical_purl": "pkg:cpan/LWP::UserAgent", "type": "cpan", "namespace": null, "name": "LWP::UserAgent", "version": null, "qualifiers": null, "subpath":...
Related to PR #123
The spec says that slashes in namespace [must not be percent encoded](https://github.com/package-url/purl-spec/blob/master/PURL-SPECIFICATION.rst#rules-for-each-purl-component). For all the examples of packages where the package type supports slashes in namespaces, the slashes are not...