advisory-database icon indicating copy to clipboard operation
advisory-database copied to clipboard

Dependency Submission API - Opam Protocol

Open smorimoto opened this issue 1 year ago • 1 comments

We have just done some work to submit the (still shallow) dependency graph in opam to the DS API. Next we want to make sure the GitHub team is aware of how to get stronger support on the GitHub side.

Currently, we are submitting metadata with the following content.

const purl = new PackageURL(
  "opam",
  null,
  dependency.name,
  dependency.version,
  null,
  null
);

And it's not difficult at all to link this to the official OCaml site, as you can see from its URL schema: https://ocaml.org/p/dune/3.3.1

image

(From: https://github.com/orgs/community/discussions/19663)

smorimoto avatar Mar 31 '23 13:03 smorimoto