Documentation improvement for PURLdb
Los mantenedores suelen responder en 1 día
@chinyeungli ya está trabajando en esto.
Desde el 1/12/2025.
Evaluación
Este issue todavía no se ha evaluado.
Descripción
https://aboutcode.readthedocs.io/projects/PURLdb/en/latest/index.html
Detect software supply chain issues by mapping package binaries to their corresponding source code and determining if there are possible discrepancies between sources and sources (such as with the XZ utils attack, or sources and binaries, where package may not report the exact source code used to build binaries with the mapping analysis.
Should be "discrepancies between sources and binaries"
https://aboutcode.readthedocs.io/projects/PURLdb/en/latest/purldb/rest_api.htm
-
If
reindexflag is True then existing package will be rescanned, ifreindex_setis True then all the package in the same set will be rescanned. If reindex flag is set to true then all the non existing package will be indexed.
It's confusing about the reindex flag when it's set to True
-
unsupported_packages
A list of package urls that are not processable by the index queue.
The package indexing queue can only handle npm and maven purls.
I think we support more packages than just npm and maven?
-
If uuid is given then all purls will be added to package set if it exists else a new set would be created and all the purls will be added to that new set.
punctuation needed
-
Package Set List
Return a list of package sets and the package data of packages within
GET /api/projects/0bbdcf88-ad07-4970-9272-7d5f4c82cc7b/
I am wondering is GET /api/projects/0bbdcf88-ad07-4970-9272-7d5f4c82cc7b/ the correct command? It's the same GET as shown for "package details" https://aboutcode.readthedocs.io/projects/PURLdb/en/latest/purldb/rest_api.html#package-details
https://aboutcode.readthedocs.io/projects/PURLdb/en/latest/purldb/purl_watch.html
-
Depending on the PurlDB size PurlWatch provides two different approach.
Should be
Depending on the size of PurlDB, PurlWatch provides two different approaches.
-
The watch frequency can be customized to balance the resource uses.
Perhaps should be
The watch frequency can be customized to balance resource usage.
- Lenguaje dominante
- HTML
- Estrellas
- 70
- Forks
- 74
- Merge medio
- 2 d 4 h
- PR fusionados (30 d)
- 7
Preparar el entorno
- Incluye un Dockerfile o un archivo de Docker Compose
- Sin plantilla de pull request
- Sin guía de contribución
Primeros pasos
- Lee el issue completo y luego la guía de contribución del proyecto.
- Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
- Haz un fork del repositorio y trabaja en una rama.
- Abre un pull request que haga referencia al número del issue.
Más de aboutcode-org/purldb
-
purlcli failsAbierto
Dificultad 2/5 1-3 horas Aptitud para principiantes 84/100
aboutcode-org/purldb#891 · 1 comentario ·
Los mantenedores suelen responder en 1 día
-
Incorrect set comparison between package names and PURLs in NPM sync logicPosiblemente ocupada @MuhammadBilal64 la tomó hace 26 días. Abierto
Dificultad 2/5 1-3 horas Aptitud para principiantes 75/100
aboutcode-org/purldb#890 · 1 comentario ·
Los mantenedores suelen responder en 1 día
-
PypiVersionAPI.get_latest_date() crashes when a release entry is missing upload_time_iso_8601Posiblemente ocupada @drawliin la tomó hace 208 días. Abierto
Dificultad 2/5 1-3 horas Aptitud para principiantes 72/100
aboutcode-org/purldb#863 ·
Los mantenedores suelen responder en 1 día
-
Add doctest and tests for clearcode coordinate helpersPosiblemente ocupada @drawliin la tomó hace 216 días. Abierto
Dificultad 2/5 1-3 horas Aptitud para principiantes 78/100
aboutcode-org/purldb#861 ·
Los mantenedores suelen responder en 1 día
-
Preserve version ordering in packagedb VersionResponsePosiblemente ocupada @drawliin la tomó hace 217 días. Abierto
Dificultad 2/5 1-3 horas Aptitud para principiantes 85/100
aboutcode-org/purldb#857 ·
Los mantenedores suelen responder en 1 día