packageurl-python
packageurl-python copied to clipboard
package-url
Python implementation of the package url spec. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ , the Google Summer of Code, nexB and other generous sponsors...
This repo currently has a test suite file within the repo. As part of the test process it seems it would be better to grab the current one and test...
Qualifiers are currently stored as strings in the database, which implies that the order of each qualifier matters. This contradicts the Package URL specification ( check for more details https://github.com/package-url/purl-spec/issues/51#issuecomment-455563672...
Reference: https://github.com/package-url/packageurl-python/issues/143 @TG1999 This replaces the recently-closed [PR 151](https://github.com/package-url/packageurl-python/pull/151). I look forward to your comments and questions.
This is related to the PURL CLI tool/library described in https://github.com/nexB/purldb/issues/247.
It is possible to create PackageURL objects that contain invalid fields, specifically by using the `PackageURL` kwarg constructor and passing in values that contain colons. Simple example: ``` >>> from...
Examples: ~~~ https://github.com/apache/logging-log4net/archive/refs/tags/rc/2.0.8-RC1.zip https://github.com/apache/logging-log4net/tree/rel/2.0.8 ~~~ Parsing those will result in: ~~~ ❯ pip show packageurl-python Name: packageurl-python Version: 0.14.0 Summary: A purl aka. Package URL parser and builder Home-page: https://github.com/package-url/packageurl-python...
@tdruez Thank you very much for the improvements of the Sourceforge download patterns. I still have some issues with the following URLs: ~~~ https://sourceforge.net/projects/keepass/files/KeePass%202.x/2.55/KeePass-2.55-Source.zip/download https://sourceforge.net/projects/codeblocks/files/Sources/20.03/codeblocks-20.03.tar.xz/download https://sourceforge.net/projects/npppluginmgr/files/v1.3.3/PluginManager_1.3.3_UNI.zip/download https://sourceforge.net/projects/openofficeorg.mirror/files/4.1.12/source/apache-openoffice-4.1.12-60e0a1c111-src.zip/download https://sourceforge.net/projects/qbittorrent/files/qbittorrent/qbittorrent-4.6.2/qbittorrent-4.6.2.tar.xz/download https://sourceforge.net/projects/scrcpy.mirror/files/v2.3.1/scrcpy-win64-v2.3.1.zip/download https://sourceforge.net/projects/zedgraph/files/zedgraph%20source/5.0.9%20%2B%204.5.9/zedgraph_source_v509_459.zip/download...
Hello. As the example of purl-spec, urls in qualifiers should be normalized as below: ``` pkg:maven/org.apache.xmlgraphics/[email protected]?repository_url=repo.spring.io%2Frelease ``` But in packageurl-python, when I set qualifiers to `{"repository_url": "repo.spring.io/release"}`, and the to_string...
This will properly escape slashes in both names and versions of packages. In addition, I've synced the tests with the ones in https://github.com/package-url/packageurl-dotnet.
Metadata
Owner
Metadata
Python implementation of the package url spec. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ , the Google Summer of Code, nexB and other generous sponsors...