ShravanShenoy

Hey @pombredanne and @AyanSinhaMahapatra, I have raised a PR for the replace directive, but had doubts regardings the best way to approach some of the the things, listed below. Would...

> Minor nits for your consideration, also please remove all unrelated changes. Thanks @TG1999 for the initial review, I will replace all instances of DartVersion with PubVersion. Regarding the other...

Somehow, just after making this PR, I came across this PR in univers : https://github.com/nexB/univers/pull/84. I am not exactly sure if this PR depends on that, but incase it does,...

> @shravankshenoy we need univers support for pub, see https://github.com/nexB/univers Thanks @TG1999 for sharing this. I went through the official pubspec documents (https://dart.dev/tools/pub/pubspec) to understand how versioning works in Dart,...

> @shravankshenoy 🙇 , IMO you don't need to learn dart for adding pub support in univers. Got it :sweat_smile: Will try to create the PR to support pub on...

Hi team, I would like to work on this issue if that's ok The high level approach to add this importer would be as follows 1. Clone the Github repo...

One point for consideration is the osv importer only supports 1 ecosystem at a time whereas this has four ecosystems (crates.io, npm, pypi, rubygems). In all other importers where we...

I have raised a PR to import data from openssf malicious packages. Let me know if any changes are required. PR #1412

I have made the changes that had been requested. Let me know if anything else needs to be done.

While working on PRs #1405 and #1417 I realized that in this PR I have not followed the purl-spec properly. For example crates.io should be mapped to cargo and rubygems...