[v6] document the logic to convert from purl or https url to purl_prefix

AppThreat / vulnerability-db

Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.0, purl, and vers.

MIT License

92 stars 22 forks source link

Closed prabhu closed 5 months ago

prabhu commented 5 months ago

While purl_prefix started like a simple purl without a version, it has some quirks:

[ ] Linux distro names are appended to the namespace while tools like cdxgen represent them as qualifiers
[ ] HTTP git URLs are transformed with a specific logic to become purl prefixes. Perhaps the logic could be moved to utils and reused in the search module?