POST: purl2all, when all you have is a hammer, everything looks like a nail!
还没有人认领这个 Issue。
评估
- 难度
- 4/5
- 预计耗时
- 3-5 天
- 新手友好度
- 15/100
- Issue 类型
- 文档
- 描述清晰度
- 需要澄清
- 活跃度
- 停滞
- 领域
- content
调研方向
该 issue 包含拟议的 purl2all 公告内容，以及指向 purldb-toolkit 和 PurlDB API 文档的链接，但没有指定目标页面、文件或测试。请检查网站的 Docusaurus/Markdown 内容结构，并确认计划使用哪个页面或文章；完成的标准是已发布约定的内容，且链接可正常工作。
由索引模型根据 Issue 内容生成。
描述
OK, I confess, I love PURLs! but I am not the only one. It is being adopted by all SBOM standards and will soon power CVE as an alternative to CPE.
What if you could access most of the things you need about software origin, license and security info with just a PURL?
Introducing purl2all: A unified entry point to software package metadata
In modern software development, the new norm is assembling complex apps from open source components, like LEGO® bricks. But managing and identifying packages across various ecosystems can be challenging. Different package managers and formats often lead to inconsistencies, making it difficult to discover, review, track and analyze software components effectively, and each ecosystem has its own small warts accumulated over the years.
purl2all helps with some of these issues by building an almost real-time, on-demand, decentralized, and distributed knowledge base for all kinds of software package metadata, normalized in a common data schema and keyed by PURL. This is a set of features integrated in AboutCode tools and designed to be utilized by services and tools that require FOSS package metadata, including of course AboutCode tools like ScanCode and VulnerableCode, or any application using Package-URLs (PURLs) to identify packages and versions, like in SBOMs and SCA.
By leveraging this de-facto standard format that Package-URLs grew into, purl2all provides a consistent and uniform method to retrieve info about software packages across different programming languages, package managers, ecosystems, and tools.
The project complements the centralized batch package data collection system in PurlDB with an on-demand software metadata collection features set. This makes its easier to obtain current, live and accurate software package data and it is benefiting developers, security analysts, and toolsmiths alike that depend on PURL.
So that going forward everything can look like a PURL ;)
For more information and to contribute to the project, visit:
- the purldb-toolkit https://github.com/aboutcode-org/purldb-toolkit
- the PurlDB API documentation https://aboutcode.readthedocs.io/projects/PURLdb/en/latest/purldb/rest_api.html
This purl2all project was funded through the NGI0 Entrust Fund 😻 https://nlnet.nl/project/purl2all
- 主要语言
- JavaScript
- 星标
- 9
- 派生
- 17
- 平均合并
- 7 小时 55 分钟
- 30 天内合并 PR
- 2
环境准备
这个项目没有提供开发容器、Dockerfile 或贡献指南，环境需要你自己搭建：先看它的 README，通用步骤见我们的新手贡献指南。
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
aboutcode-org/www.aboutcode.org 的其他 Issue
-
Making all post button.可能已有人在做 @sarthaklole 于 71 天前认领。 未关闭
难度 2/5 1-3 小时 新手友好度 72/100
aboutcode-org/www.aboutcode.org#117 · 3 条评论 ·
-
WWW: Reduce frequency of update-releases可能重新可做 @johnmhoran 于 52 天前认领，目前没有进行中的 PR。 未关闭ci-workflow
难度 2/5 1-3 小时 新手友好度 45/100
aboutcode-org/www.aboutcode.org#180 · 已指派 1 人 ·
-
DOCS: Create new AboutCode stack diagram(s)可能重新可做 @hixvikas 于 53 天前认领，目前没有进行中的 PR。 未关闭documentation
难度 5/5 一周以上 新手友好度 35/100
aboutcode-org/www.aboutcode.org#166 · 1 条评论 ·
-
WWW: Create About top level page?可能已有人在做 @pombredanne 于 155 天前认领。 未关闭website
难度 2/5 1-3 小时 新手友好度 35/100
aboutcode-org/www.aboutcode.org#164 · 1 个 reaction · 已指派 1 人 ·
-
WWW: Add Initiatives and grant Projects可能重新可做 @mjherzog 于 242 天前认领，目前没有进行中的 PR。 未关闭enhancement needs design website
难度 5/5 一周以上 新手友好度 25/100
aboutcode-org/www.aboutcode.org#141 · 已指派 1 人 ·
查看 aboutcode-org/www.aboutcode.org 的全部 Issue
相似的 Issue
-
难度 2/5 1-3 小时 新手友好度 72/100
-
factory-active task-identify-harness-labels-done task-identify-issue-type-done
难度 2/5 1-3 小时 新手友好度 82/100
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 66/100
mailgun/mailgun.js#544 ·
-
beginner bug frontend
难度 2/5 1-3 小时 新手友好度 85/100
BistaDinesh03/critique#266 ·
维护者通常 1 天内回复
-
New tool: ⚪️ writenode可能已有人在做 @github-actions 今天认领。 未关闭submission triage
难度 2/5 1-3 小时 新手友好度 62/100
kausalflow/tools#251 · 1 条评论 ·
维护者通常 1 天内回复