aboutcode-org / aboutcode-org/vulnerablecode

Use purl for carrying around package informations

Open
#482 1 comment 0 reactions 0 assignees View on GitHub
debt import-improver-migration
Dominant language
Python
Stars
702
Forks
328
Avg merge
3d 8h
Merged PRs (30d)
3

Description

In https://github.com/nexB/vulnerablecode/blob/24e33966bae6124e381556e520e18f1129c352fc/vulnerabilities/package_managers.py#L213 there is a new syntax where we use things such as "org.apache.org:tomcat" to pass Package URL-like data around. We should instead use either a purl string or a PackageURL object

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.