PurlDB: is a set of tools to create and expose a database of purls (Package URLs). This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ and nexB for https://www.aboutcode.org/
The PurlDB tools include:
- PackageDB that is the reference model (based on ScanCode toolkit) that contains package data with PURL (Package URLs) being a first class citizen.
- MineCode that contains utilities to mine package repositories
- MatchCode that contains utilities to index package metadata and resources for matching
- MatchCode.io that provides package matching functionalities for codebases
- ClearCode that contains utilities to mine Clearlydefined for package data
- purldb-toolkit CLI utility and library to use the PurlDB, its API and various related libraries.
Read more at: https://purldb.readthedocs.io
Get the code at: https://github.com/aboutcode-org/purldb