PurlDB

PurlDB: is a set of tools to create and expose a database of purls (Package URLs). This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ and nexB for https://www.aboutcode.org/

The PurlDB tools include:

  • PackageDB that is the reference model (based on ScanCode toolkit) that contains package data with PURL (Package URLs) being a first class citizen.

  • MineCode that contains utilities to mine package repositories

  • MatchCode that contains utilities to index package metadata and resources for matching

  • MatchCode.io that provides package matching functionalities for codebases

  • ClearCode that contains utilities to mine Clearlydefined for package data

  • purldb-toolkit CLI utility and library to use the PurlDB, its API and various related libraries.

Read more at: https://purldb.readthedocs.io

Get the code at: https://github.com/aboutcode-org/purldb