Add `purl` to the `PackageInfo` provider

[shs96c]

A purl is a URL string used to identify and locate a software package in a mostly universal and uniform way across programing languages, package managers, packaging conventions, tools, APIs and databases.

The most relevant usage is within a CycloneDX-format SBOM, as documented here: https://cyclonedx.org/docs/1.6/json/#components_items_purl

There is not enough information in the existing PackageInfo to successfully construct a valid pURL, so adding this here avoids any possible ambiguity.

It's a good idea to open an issue first for discussion.

• [x] Tests pass
• [x] Tests and examples for any new features.
• [x] Appropriate changes to README are included in PR

[peakschris]

@shs96c thank you for this. @aiuto any chance of a new release so we can use this?

[tonyaiuto]

Sure. I can do one.

On Sun, Jul 7, 2024 at 3:11 AM peakschris @.***> wrote:

@shs96c https://github.com/shs96c thank you for this. @aiuto https://github.com/aiuto any chance of a new release so we can use this?

— Reply to this email directly, view it on GitHub https://github.com/bazelbuild/rules_license/pull/143#issuecomment-2212349823, or unsubscribe https://github.com/notifications/unsubscribe-auth/AC22ZWM4BARX7LI6KWCTOCDZLDS2NAVCNFSM6AAAAABH342GE6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDEMJSGM2DSOBSGM . You are receiving this because you are subscribed to this thread.Message ID: @.***>

[peakschris]

@aiuto thanks! I've also submitted https://github.com/bazelbuild/rules_license/pull/144, if it's easy perhaps that could be added to the release?

[fmeum]

@aiuto @tonyaiuto Friendly ping on the release, we would really like to start using this in Gazelle/rules_go.