search

scanoss / purl2cpe

PURL to CPE Relationship mapping project.
MIT License
77 stars 20 forks source link

No version information in PURL #11

Closed anthonyharrison closed 1 year ago

anthonyharrison commented 1 year ago

Any reason why the PURL references don't contain the version information which is contained within the cpe entry?

scanossmining commented 1 year ago

@anthonyharrison The process of pairing PURLs to CPEs is done at this moment manually by our team of curators. We're only pairing the unversioned purls to all versions of a CPE in order to speed up the pairing process. Adding also versions to each purl will require a lot more time to process all the changes, since we cannot automatically use the version from inside the CPE and attach it to the purl. In the future we might add also versions to the purls and change the format of the dataset