purl-spec
purl-spec copied to clipboard
package-url
A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby
The guidance says that the platform defaults to `ruby`. https://github.com/package-url/purl-spec/blob/master/PURL-TYPES.rst#gem However, Gemfile.lock files specify a list of platforms and make a subtle distinction between platforms and Ruby VM. RubyGems API,...
I've been playing around with [GitHub's Dependency Submission API](https://docs.github.com/en/rest/dependency-graph/dependency-submission?apiVersion=2022-11-28#create-a-snapshot-of-dependencies-for-a-repository), which consumes pURL(s). However, as noted [here](https://github.com/renovatebot/renovate/discussions/24823#discussioncomment-8132131) and in https://github.com/anchore/syft/issues/1622, it appears that GitHub's support for pURL `type` fields has some...
We recently learned that a platform has a limit of 255 characters on the length of a purl. Please formally clarify any requirement on max length (even if it is...
With an ever-growing list of malicious plugins, vscode rightly requires its type, similar to sublime and others. I'm proposing to use `vsix` as the type to represent the file extension...
This adds the `brew` purl type. Closes #254.
This PR adds a Julia type, along with some tests based on the provided examples. cc https://github.com/package-url/packageurl-go/pull/44
An initial draft for bundles and features. There are more p2 types, but I can't see any use case where it would be necessary to explicitly specify them. #271
There doesn't seem to be a specification for how `distro` should be formatted apart from in examples (e.g. debian), or for some distros like Alpine there are no examples of...
The [Container-Optimized OS](https://cloud.google.com/container-optimized-os/docs) (COS) is a Google provided operating system that is optimized to run containers. "Container-Optimized OS does not include a package manager; as such, you'll be unable to...
I wrote up a spec for the `opkg` PURL type, which I think we should use as a root type instead of `openwrt` (which is currently stubbed out but not...
Metadata
Owner
Metadata
A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby