aboutcode-org/purldb

View on GitHub

Tools to create and deploy a database of software packages metadata, origin, dependencies, and license keyed by PURLs (Package URLs). Supported by AboutCode, sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ , nexB and other fine supporters. Chat is at https://gitter.im/aboutcode-org/discuss

Stars: 67
Forks: 69
Open beginner issues: 0
Indexed issues: 317
Avg merge: 8d 8h
Merged PRs (30d): 1

Dominant language: HTML
License: No license data
Last GitHub push: Sep 1, 2026
Latest indexed: Sep 13, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: good first issue help wanted

Open All

317 open issues indexed

Enhance Alpine package scan results Open

aboutcode-org/purldb#307 · 19 comments · 1 reaction · 0 assignees · Indexed Sep 13, 2026
Add support for udeb Open

aboutcode-org/purldb#2 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
debian mapper: better process Vcs-Git field Open

aboutcode-org/purldb#3 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
debian mapper & visitor: make download locations configurable Open

aboutcode-org/purldb#4 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
debian visitor: do not unnecessarily process ls-lR files Open

aboutcode-org/purldb#5 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Add support for matching Open

matchcode

aboutcode-org/purldb#13 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Track archiving and project going dead or awol Open

aboutcode-org/purldb#17 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Create UI for purldb in the style of SCIO and VCIO Open

good first issue

aboutcode-org/purldb#20 · 8 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Add ``download_url`` or ``download_path`` in qualifiers Open

good first issue

aboutcode-org/purldb#21 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Increase version field length on Package Open

aboutcode-org/purldb#25 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
npm visitor does not visit unless https://replicate.npmjs.com/ is visited Open

aboutcode-org/purldb#27 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
`django.db.utils.DataError: value too long for type character varying(70)` when running run_map on npm packages Open

aboutcode-org/purldb#28 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Some maven URLs are wrong Open

aboutcode-org/purldb#29 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Error when visiting rpm packages Open

aboutcode-org/purldb#32 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Error encountered when visiting eclipse Open

aboutcode-org/purldb#33 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Error visiting fedora.is Open

aboutcode-org/purldb#35 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Suggestion: add wikidata information for a package, if available Open

aboutcode-org/purldb#39 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Enhance data with https://endoflife.date/ Open

aboutcode-org/purldb#42 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Enhance data with https://github.com/ossf/scorecard Open

aboutcode-org/purldb#46 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
How to run `scan_and_fingerprint_codebase` in scancode.io Open

aboutcode-org/purldb#51 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
PURLDB: Ensure Maven matching works Open

aboutcode-org/purldb#52 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Track package relations both ways Open

aboutcode-org/purldb#54 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Ensure we report a source package for maven pom scm section Open

aboutcode-org/purldb#55 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Have way to see which packages need to be reviewed and enhanced Open

enhancement

aboutcode-org/purldb#56 · 3 comments · 0 reactions · 3 assignees · Indexed Sep 13, 2026
Avoid repetitive requests Open

aboutcode-org/purldb#63 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Error encountered when mapping npm Package Open

aboutcode-org/purldb#65 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Purl field not set for packages that have qualifiers Open

aboutcode-org/purldb#66 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Support detecting/matching uberjars Open

aboutcode-org/purldb#69 · 4 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Do not index or match on empty sha1 values Open

aboutcode-org/purldb#71 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Deal with multiple sha1 matches Open

aboutcode-org/purldb#72 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Add web interface where someone could point to a URL of a package to collect and scan Open

aboutcode-org/purldb#89 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 13, 2026
See if we can expose only the `index_package` endpoint on the PriorityResourceURI view set Open

aboutcode-org/purldb#93 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Introduce notion of Package set Open

aboutcode-org/purldb#95 · 11 comments · 2 reactions · 1 assignee · Indexed Sep 13, 2026
Support correct detailing of nested/bundled packages Open

aboutcode-org/purldb#98 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Mine yocto packages, aka. recipes/layers Open

aboutcode-org/purldb#100 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Mine pkg-config files in source code packages Open

aboutcode-org/purldb#101 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
mine Linux Software Map files Open

aboutcode-org/purldb#102 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
JavaScript: process SourceMappingURL Open

aboutcode-org/purldb#104 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
mine package descriptions from distributions Open

aboutcode-org/purldb#105 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Multiple entries for the same Package and fingerprint Open

aboutcode-org/purldb#107 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Index GitHub repos Open

aboutcode-org/purldb#108 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Set pagination for different API views Open

aboutcode-org/purldb#110 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
purldb: mine and index elasticsearch Open

aboutcode-org/purldb#111 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Consider tracking the Resource a directory fingerprint is for Open

aboutcode-org/purldb#112 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Support rockylinux and CIQ RPM repos Open

aboutcode-org/purldb#117 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 13, 2026
Introduce demand-based-improvers (DBI) to purldb Open

enhancement

aboutcode-org/purldb#120 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
store historical download URLs/VCS/etc. Open

aboutcode-org/purldb#122 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Collect corresponding github repo for each apache maven project Open

aboutcode-org/purldb#123 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Update scan queue related code Open

aboutcode-org/purldb#125 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Consider mining https://deps.dev/ Open

aboutcode-org/purldb#126 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026

aboutcode-org/purldb

Get new issues in your inbox