ort Add PurlDB as a scan storage provider

Add PurlDB as a scan storage provider

Open sschuberth opened this issue 6 months ago • 1 comments

Similar to ClearlyDefined, we should add PurlDB as a source code ScanCode results for packages identified by purl.

The API to use that @pombredanne pointed out to me is https://aboutcode.readthedocs.io/projects/PURLdb/en/latest/purldb/rest_api.html#collect.

May 02 '25 10:05 sschuberth

@pombredanne, requesting data from https://public.purldb.io/api/collect/?purl=pkg:npm/[email protected] is extremely slow:

$ time curl https://public.purldb.io/api/collect/?purl=pkg:npm/[email protected]
...
real    0m27.074s
user    0m0.020s
sys     0m0.018s

That's 27 seconds to get 4k of JSON data 😱

Are you aware of there being a performance issue?

May 08 '25 12:05 sschuberth