Create repo purls for GIT ecosystem ranges
Open
backlog
data quality
- Dominant language
- Go
- Stars
- 2.9k
- Forks
- 369
- Avg merge
- 1d 17h
- Merged PRs (30d)
- 149
Description
**The CVE ID**
https://osv.dev/vulnerability/CVE-2019-25219
**Describe the data quality issue observed**
PURL entries are provided for the Debians. The Git repo could also have a PURL, in this case: `pkg:generic/github.com/chriskohlhoff/asio@asio-x-y-z` where the version comes from the tagging scheme used in that repo.
**Suggested changes to record**
Add a PURL for the Git repo. This supports the use case where the code is being packaged directly by the consumer, as opposed to installed via the Debian.
Contributor guide
Assessment
This issue has not been assessed yet.