purl-spec
purl-spec copied to clipboard
A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby
Hello, Go Modules has been out for a few years and many packages have adopted it now. Here are some suggestions for updating the platform-specific instructions for golang: * remove...
`pkg:rpm/[email protected]?arch=i686&epoch=1&distro=fedora-25` I guess namespace `fedora` is missing here, or is namespace optional?
BlackBerry respectfully requests reservation of the qpkg type to identify packages belonging to QNX's package manager. QNX is a commercial Unix-like real-time operating system, aimed primarily at the embedded systems...
Governance
As purl adoption increases, and others consider purl adoption, there is a desire for governance of the project to be more clearly defined. At the current size of the project...
BlackBerry respectfully requests reservation of the `qpkg` type to identify packages by QNX's package manager. [QNX](https://blackberry.qnx.com/) is a commercial Unix-like real-time operating system, aimed primarily at the embedded systems market....
If we look at go packages like these https://github.com/go-jose/go-jose/archive/refs/tags/v4.0.1.zip https://pkg.go.dev/github.com/go-jose/go-jose/v3?tab=versions, they have a leading v in them. Whereas if we look in osv.dev they are stored without any leading v...
The ECMA https://tc54.org/ is inviting this spec to become standardized there. I like this overall and I feel this is a good thing. This issue is to discuss this and...
I suggest to add a version scheme `datetime` that is defined as follows: To compare 2 versions a and b, do: Compare the as datetime parsed values (including the timezones)....
Everybody knows about the MD5 SHA-1 SHA-256 SHA-512 algorithms, and these are almost universally written as md5 sha1 sha256 sha512. Unfortunately, the PURL spec says the key for the checksum...
This adds documentation for the `luarock` package type used for the Lua language.