packageurl-python icon indicating copy to clipboard operation
packageurl-python copied to clipboard

Wrong purl to url conversion for bitbucket

Open vargenau opened this issue 1 month ago • 3 comments

Converting purl:

pkg:bitbucket/pypa/[email protected]

to url gives:

https://bitbucket.org/pypa/distlib/get/0.2.8.tar.gz

Getting this URL gives:

You may not have access to this repository or it no longer exists in this workspace. If you think this repository exists and you have access, make sure you are authenticated.

vargenau avatar Dec 03 '25 15:12 vargenau

Actually the repo has moved likely first from hg @ bitbucket, to git @ bitbucket before moving to GitHub.

See for some background details, and way to resolve this: https://github.com/aboutcode-org/purldb/issues/771

pombredanne avatar Dec 03 '25 22:12 pombredanne

for info, for an existing repo: pkg:bitbucket/ccideas1/[email protected] yields: https://bitbucket.org/ccideas1/cyclonedx-npm-pipe/get/v1.3.0.tar.gz

and this is correct

pombredanne avatar Dec 03 '25 22:12 pombredanne

Hi Philippe, Thank you very much for your explanations. I had taken the example from Black Duck PURL page. See https://community.blackduck.com/s/article/Purl-types-supported-by-Black-Duck

vargenau avatar Dec 04 '25 16:12 vargenau