John M. Horan

Create public purl-validate UI

5

Reference: https://github.com/aboutcode-org/purldb/issues/522 This preserves the initial demo version. Next: begin to implement latest feedback.

Public purldb API appears to ignore subpaths when submitted as part of a URL

1

It looks like the public purldDB API responds to the inclusion of a `#` subpath separator followed by the subpath value by ignoring the subpath. An example: in the public...

collect/ endpoint query for conan PURL with non-existent version returns 'Server Error (500)'

1

Using the local `collect/` endpoint to populate my local DB, if I search for a `conan` type with a version that does not exist, I get a `Server Error (500)`....

Report only the "best" fixed version that has no vulnerabilities of its own?

1

This is related to "Report only those fixed versions that are greater than the affected version" #1228. The question: Do we want to display/report the most relevant/best `fixed by` version...

Continue reporting/displaying PURLs with URL encoding?

2

This is related to https://github.com/nexB/vulnerablecode/issues/1228 and https://github.com/nexB/vulnerablecode/issues/1252. I noticed yesterday while working on https://github.com/nexB/vulnerablecode/issues/1228 that my tests using `univers` (https://github.com/nexB/univers) to compare affected and fixed by versions threw a `univers.versions.InvalidVersion:...

Add component-specific spec test files

2

This issue is intended to raise and track the question of whether a set of component-focused .json test files would be a useful addition to the current group of test...

Clarify spec for subpath

15

johnmhoran: 2025-01-20 18:39: Just started to flesh out the relevant issues, PRs and comments before converting this to an issue. the "board": Relevant issues and PRs: - [x] https://github.com/package-url/purl-spec/issues/35 -...

Thank you for this powerful tool. I am exploring modifying several of the `md` templates as well as the `md_template.py` file, which is outside of the `md` folder and thus...