aboutcode-org/purldb

View on GitHub

Tools to create and deploy a database of software packages metadata, origin, dependencies, and license keyed by PURLs (Package URLs). Supported by AboutCode, sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ , nexB and other fine supporters. Chat is at https://gitter.im/aboutcode-org/discuss

Stars: 67
Forks: 69
Open beginner issues: 0
Indexed issues: 317
Avg merge: 8d 8h
Merged PRs (30d): 1

Dominant language: HTML
License: No license data
Last GitHub push: Sep 1, 2026
Latest indexed: Sep 13, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: good first issue help wanted

Open All

317 open issues indexed

Multi-level, progressive data collection Open

aboutcode-org/purldb#257 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
ELF package metadata to purl Open

aboutcode-org/purldb#261 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 13, 2026
Use `univers` for sorting out the latest version of a package Open

enhancement

aboutcode-org/purldb#269 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Update how API key are created and issued Open

aboutcode-org/purldb#270 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
RFC: Improve Package models Open

aboutcode-org/purldb#272 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
purlcli: purl2scan Open

aboutcode-org/purldb#277 · 4 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
postmarketOS packages Open

aboutcode-org/purldb#278 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Support `vers` in PackageWatch Open

enhancement

aboutcode-org/purldb#279 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Design how scale code matching on different machines Open

aboutcode-org/purldb#284 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Collect Electron fingerprints from https://github.com/captn3m0/electron-fingerprints/ Open

aboutcode-org/purldb#286 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Treat specially some common build tools Open

aboutcode-org/purldb#291 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Check .ABOUT files in CI Open

aboutcode-org/purldb#293 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Mine Codeberg packages Open

aboutcode-org/purldb#306 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Track relationships between packages derived from the same upstream Open

aboutcode-org/purldb#308 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Do not allow browsing for packages and resources Open

aboutcode-org/purldb#309 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Occasional errors accessing 'validate' endpoint and fetchcode/package_versions.py versions()/get_response() Open

bug

aboutcode-org/purldb#311 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
create and upload dumps of purldb to a download site Open

aboutcode-org/purldb#317 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
django.core.exceptions.ImproperlyConfigured: Set the SECRET_KEY environment variable Open

aboutcode-org/purldb#319 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Extend PURL Scan API endpoint to run other code scanning tools, beyond ScanCode Open

aboutcode-org/purldb#336 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Add debian ".udeb" support Open

aboutcode-org/purldb#345 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Track code version and pipelines used to index a package Open

aboutcode-org/purldb#347 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Some packages under consideration have no versioned archives and no git tag Open

aboutcode-org/purldb#349 · 7 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Mine http://www.nicemice.net/cexcept/src/ Open

aboutcode-org/purldb#352 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Review and ensure package mined with conan also have non conan purls Open

aboutcode-org/purldb#354 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
PurlDB: purl2sym Data collection Batch6 Open

aboutcode-org/purldb#355 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Collect and Index Azul OpenJDKs Open

data

aboutcode-org/purldb#358 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Ensure we support legacy, maven-metadata.xml-only Maven packages Open

aboutcode-org/purldb#359 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Update purlcli 'urls' command to reflect new/updated cocoapods/pypi support Open

enhancement

aboutcode-org/purldb#365 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Add git/vcs subcommand to CLI Open

aboutcode-org/purldb#371 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Add support for Bazel registries Open

aboutcode-org/purldb#377 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Aggregate various tools and data for scoring/ratings/features-eval of packages Open

aboutcode-org/purldb#378 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
PURLDB: Collect and return Go package metadata on demand from a PURL Open

aboutcode-org/purldb#379 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
PURLDB: Collect and return Alpine package metadata on demand for a PURL Open

aboutcode-org/purldb#380 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
PurlDB: Use proper apk package type for Alpine Open

aboutcode-org/purldb#381 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Mine Alpine packages Open

aboutcode-org/purldb#382 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Index Mariner RPM packages Open

aboutcode-org/purldb#383 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Enable queuing a scan for a d2d pipeline with two input URLs (from and to) Open

high priority

aboutcode-org/purldb#387 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Add support for pure python tools and native tools Open

aboutcode-org/purldb#388 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Same class function `PackageViewSet` present in `packagedb/api.py` Open

aboutcode-org/purldb#389 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Update Documentation of PurlDB Open

aboutcode-org/purldb#391 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Worker cannot get next download url if purldb is behind basicauth Open

aboutcode-org/purldb#395 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Double check that package_content are set correctly in Maven package sets. Open

bug

aboutcode-org/purldb#396 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Given a PURL, scan code for secret leaks with gitleaks Open

aboutcode-org/purldb#402 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Document how we can analyze the d2d of a package using "back2source" features Open

aboutcode-org/purldb#405 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
PurlDB: Index all Mariner RPMs Open

aboutcode-org/purldb#406 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
PurlDB: Collect and index all the the RHEL packages used in UBI's Open

aboutcode-org/purldb#407 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
PurlDB: Find the source package of a distro package so it can be scanned and indexed Open

aboutcode-org/purldb#408 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Index cuda packages Open

aboutcode-org/purldb#410 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Matchcode pipeline is crashing Open

aboutcode-org/purldb#412 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Collect public Maven repos beyond Maven central Open

aboutcode-org/purldb#413 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026

aboutcode-org/purldb

Get new issues in your inbox