purl-spec icon indicating copy to clipboard operation
purl-spec copied to clipboard

A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby

Results 162 purl-spec issues
Sort by recently updated
recently updated
newest added

Hello, Go Modules has been out for a few years and many packages have adopted it now. Here are some suggestions for updating the platform-specific instructions for golang: * remove...

`pkg:rpm/[email protected]?arch=i686&epoch=1&distro=fedora-25` I guess namespace `fedora` is missing here, or is namespace optional?

BlackBerry respectfully requests reservation of the qpkg type to identify packages belonging to QNX's package manager. QNX is a commercial Unix-like real-time operating system, aimed primarily at the embedded systems...

PURL type definition

As purl adoption increases, and others consider purl adoption, there is a desire for governance of the project to be more clearly defined. At the current size of the project...

BlackBerry respectfully requests reservation of the `qpkg` type to identify packages by QNX's package manager. [QNX](https://blackberry.qnx.com/) is a commercial Unix-like real-time operating system, aimed primarily at the embedded systems market....

If we look at go packages like these https://github.com/go-jose/go-jose/archive/refs/tags/v4.0.1.zip https://pkg.go.dev/github.com/go-jose/go-jose/v3?tab=versions, they have a leading v in them. Whereas if we look in osv.dev they are stored without any leading v...

The ECMA https://tc54.org/ is inviting this spec to become standardized there. I like this overall and I feel this is a good thing. This issue is to discuss this and...

I suggest to add a version scheme `datetime` that is defined as follows: To compare 2 versions a and b, do: Compare the as datetime parsed values (including the timezones)....

Everybody knows about the MD5 SHA-1 SHA-256 SHA-512 algorithms, and these are almost universally written as md5 sha1 sha256 sha512. Unfortunately, the PURL spec says the key for the checksum...

This adds documentation for the `luarock` package type used for the Lua language.