oss-review-toolkit / ort

A suite of tools to automate software compliance checks.
https://oss-review-toolkit.org
Apache License 2.0
1.59k stars 309 forks source link

Consider using a "purl" as the package identifier #20

Closed sschuberth closed 5 years ago

sschuberth commented 6 years ago

Consider redesigning the package identifier as a "puurl" as described at https://github.com/nexB/scancode-toolkit/issues/805#issuecomment-340313273.

sschuberth commented 6 years ago

The "purl" (not anymore "puurl") specification has its own repository now: https://github.com/package-url/purl-spec

pombredanne commented 5 years ago

pinging myself to be kept posted on this ticket

pombredanne commented 5 years ago

For info @stevespringett contributed a Java implementation of Package URLs https://github.com/package-url/packageurl-java

sschuberth commented 5 years ago

pinging myself to be kept posted on this ticket

Just click the "Subscribe" button on the right next time 😉

sschuberth commented 5 years ago

In https://github.com/heremaps/oss-review-toolkit/pull/1266 we stopped overriding toString() for Identifier in favor of introducing toCoordinate(). So there is no single "correct" string representation for an Identifier anymore, and https://github.com/heremaps/oss-review-toolkit/pull/1266/commits/68d8c3711a28fe84a7cfdcf29743be43e4af91e8 introduced toPurl() as another string representation that can be used at will.