google/osv.dev

Missing PURL converters

Open

#2,402 opened on Jul 18, 2024

View on GitHub
 (6 comments) (1 reaction) (2 assignees)Go (339 forks)auto 404
backlogcleanupdata qualitygood first issue

Repository metrics

Stars
 (2,810 stars)
PR merge metrics
 (PR metrics pending)

Description

We've added a few OSV ecosystems without adding PURL conversions for them.

Ecosystems that don't have corresponding PURL entries (And their known purl type):

  • AlmaLinux
  • Android
  • Bioconductor
  • Bitnami (bitnami)
  • Chainguard (apk/chainguard)
  • ConanCenter (conan)
  • CRAN (cran)
  • GHC
  • GitHub Actions (github?)
  • Linux
  • Photon OS
  • Rocky Linux
  • SwiftURL (swift) (thanks @sschuberth!)
  • Ubuntu (deb/ubuntu)
  • Wolfi (apk/wolfi)

Some of the OSV records have PURLs already because the data source provides them (e.g. Bitnami, Chainguard & Wolfi)

I think we need to come up with some way to make sure we always have these, and explicitly define ecosystems with no PURL equivalents.

Contributor guide

Research direction
Tech stack
Domain
Issue type
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Prerequisites
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.