aboutcode-org/purldb

View on GitHub

Tools to create and deploy a database of software packages metadata, origin, dependencies, and license keyed by PURLs (Package URLs). Supported by AboutCode, sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ , nexB and other fine supporters. Chat is at https://gitter.im/aboutcode-org/discuss

Stars: 67
Forks: 69
Open beginner issues: 0
Indexed issues: 317
Avg merge: 8d 8h
Merged PRs (30d): 1

Dominant language: HTML
License: No license data
Last GitHub push: Sep 1, 2026
Latest indexed: Sep 13, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: good first issue help wanted

Open All

317 open issues indexed

Validate PURL API says pkg:maven/org.kie/kie-dmn-model@7.44.0.Final does not exist in the upstream repo, but it does? Open

aboutcode-org/purldb#671 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Add option to enable use of TLS for connection to Redis Open

aboutcode-org/purldb#672 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Build of container image fails due to incombatible scancode-toolkit dependency Open

aboutcode-org/purldb#674 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 13, 2026
Collect PURLs from rubygems Open

aboutcode-org/purldb#683 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Add support for CPAN Distribution mining Open

aboutcode-org/purldb#694 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Create PR for a gnu package type @ purl spec Open

aboutcode-org/purldb#695 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Handle GitHub API Rate Limit Open

aboutcode-org/purldb#723 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
More decentralized, distributed PURL metadata collection Open

aboutcode-org/purldb#727 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Add shared helper for listing Git tags via git ls-remote Open

aboutcode-org/purldb#735 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Update checkpointing in alpine and maven pipelines Open

aboutcode-org/purldb#740 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
More on-demand collection Open

aboutcode-org/purldb#744 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Cannot install purlcli on Mac Open

aboutcode-org/purldb#749 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 13, 2026
Add support for new https://gem.coop/ Rgem repo Open

aboutcode-org/purldb#751 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
code-genetics: Enrich scans with known origin Open

aboutcode-org/purldb#752 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
nixpkgs-clarity: Create dataset of curated and validated license metadata for Nix packages Open

aboutcode-org/purldb#753 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
nixpkgs-clarity: Create dataset of curated and validated license metadata for Nix packages Open

aboutcode-org/purldb#754 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
nixpkgs-clarity: Create dataset of curated and validated license metadata for Nix packages Open

aboutcode-org/purldb#755 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
nixpkgs-clarity: Create dataset of curated and validated license metadata for Nix packages Open

aboutcode-org/purldb#756 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
nixpkgs-clarity: Publish results and create documentation for future deployment Open

aboutcode-org/purldb#759 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
nixpkgs-clarity: Publish data curated set of license issues found in nixpkgs and upstream projects Open

aboutcode-org/purldb#760 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
nixpkgs-clarity: Document new design for license expression Open

aboutcode-org/purldb#761 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
nixpkgs-clarity: Package and document AboutCode for future deployment at Nix Foundation Open

aboutcode-org/purldb#762 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Sync project run states between scancode.io client and matchcode server Open

aboutcode-org/purldb#763 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Documentation improvement for PURLdb Open

aboutcode-org/purldb#768 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Handle bitbucket deletion and redirection Open

aboutcode-org/purldb#771 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
cannot create packages from purls Open

aboutcode-org/purldb#795 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Import disco API JVM data Open

aboutcode-org/purldb#797 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Import and track data for packages that have a reproducible build Open

aboutcode-org/purldb#799 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Collect meson wrapdb Open

aboutcode-org/purldb#803 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Split Alpine PURL mining pipeline into separate optional steps Open

aboutcode-org/purldb#806 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Ensure that PURLs are sorted according to their version scheme with univers Open

aboutcode-org/purldb#808 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
RFC: Designing a Graph-Based Popularity Metric for Packages in PurlDB Open

aboutcode-org/purldb#833 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Store metadata files in packagedb Open

aboutcode-org/purldb#840 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Vulnerable and outdated dependencies Open

aboutcode-org/purldb#844 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
minecode-pipelines: update pipelines to save api calls as well as purls Open

aboutcode-org/purldb#845 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 13, 2026
minecode-pipelines: Add pipeline to mine go package versions Open

minecode-pipelines

aboutcode-org/purldb#846 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
clearcode/store_scans.py fails to bootstrap shard repositories reliably Open

aboutcode-org/purldb#847 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
test_package_endpoint_throttling fails with 429 instead of expected 200 Open

aboutcode-org/purldb#849 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
NameError: 'e' referenced outside except block in visit_uri() when visit_error is set Open

aboutcode-org/purldb#851 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
PypiVersionAPI.get_latest_date() crashes when a PyPI release entry is missing upload_time_iso_8601 Open

aboutcode-org/purldb#854 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Add caching layer for repeated PURL metadata queries Open

aboutcode-org/purldb#855 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Public API often returns error 500 for no obivous reason Open

aboutcode-org/purldb#856 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Preserve version ordering in packagedb VersionResponse Open

aboutcode-org/purldb#857 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Add doctest and tests for clearcode coordinate helpers Open

aboutcode-org/purldb#861 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
PypiVersionAPI.get_latest_date() crashes when a release entry is missing upload_time_iso_8601 Open

aboutcode-org/purldb#863 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
[GSOC 2026] Proposal feedback: Package Popularity Ranking prototype Open

aboutcode-org/purldb#865 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Error while running mine_maven pipeline Open

bug

aboutcode-org/purldb#866 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
maven-heaven: Correct origin of code for vendored or copied or shaded JARs or code fragments Open

aboutcode-org/purldb#867 · 1 comment · 0 reactions · 2 assignees · Indexed Sep 13, 2026
maven-heaven: Automate scans review, and determine when a POM/JAR license is incorrect Open

aboutcode-org/purldb#868 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 13, 2026
npm-health: Extend PurlDB with a new REST API for health data metrics and scores Open

aboutcode-org/purldb#869 · 3 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026

aboutcode-org/purldb

Get new issues in your inbox