Hi hello!!! @steven-esser @pombredanne a colleague at Sonatype is playing with purls and discovered a couple issues (or what he perceives as issues), so here I am with some PRs for you: package-url/packageurl-go#32 (first so far, golang purl lib, seems to be missing the test-suite-json?)
There are a couple test failures, and I think they are valid best I can SORT of tell
Ok @steven-esser @pombredanne (and I suppose my friend in SBOMs, @stevespringett ), fixed the test failures and added the test data in on: package-url/packageurl-go#32
let me check this over the we
I'll probably have a couple other tiny PRs too, just to help us use it
Hey @pombredanne - re PEP-561 typing (and beyond the official Rationale), we had a few downstream folk request us type the CycloneDX Python LIb as they had tools like mypy in their CI processes and it caused extra work (headaches) for them to deal with un-typed dependencies.
tldr: Hygiene I guess?
Re: help @pombredanne - is this the best place to talk specifically about the Python library?
@madpah I feel that typed Python is another language at times and not my Python :P
but I can live with it as long as we are still supporting Python 3.6+ for now
so please go for it :+1:
but I can live with it as long as we are still supporting Python 3.6+ for now
so please go for it :+1:
What CI is actually used for package-url Python @pombredanne ? It’s not clear from the repo?
The CI seem to be gone entirely :)
@madpah please go for it :)
Might need to get some permissions on the main https://github.com/package-url/packageurl-python repo @pombredanne
@madpah unrelated I think you found some use for https://github.com/nexB/pip-requirements-parser in some CycloneDX lib of yours and this sia wesome
@madpah done :)
1 reply
DarthHater @DarthHater shakes fist at air
Anyone know why the python package isn't letting me get a url from a purl?
@app.command()
def get(purl: str):
parsed = PackageURL.from_string(purl)
typer.echo(f"Grabbing {parsed}")
typer.echo("A", purl2url.get_url(purl))
typer.echo("B", purl2url.get_url(parsed.to_string()))
typer.echo("C", purl2url.get_url(str(parsed)))
typer.echo("D", purl2url.get_url(parsed.to_string()))For this I've tried the two following PURLs:
And for both of them I successfully parse and can print the purl, but the A, B, C, D echos after that are all empty (but don't crash).
@tclasen because it has not been implemented yet : https://github.com/package-url/packageurl-python/blob/main/src/packageurl/contrib/purl2url.py :)
It should be reasonably straightforward using tidbits of code from https://github.com/nexB/fetchcode/blob/master/src/fetchcode/package.py and the expansive set in https://github.com/nexB/scancode-toolkit/tree/develop/src/packagedcode
@tclasen can I interest you in contributing these?
@TG1999 ^ ping
@tclasen please start with an issue
@pombredanne any chance you are gonna check this out soonish? package-url/packageurl-go#32 (coworker is demoing something that relies on it right now, hence asking)
Thanks dude!
Hi, I would like to contribute, but am unsure how to go about it. I've seen an issue where a contributing.md was discussed, but never got realized.
What is the preffered way to contribute? Should I open an issue to discuss my ideas, discuss them here or start writing the specifications I think are needed and then discuss in the PR?
Specifically I'm looking into creating an SBOM for a Windows 10 System and would like to add a type for Store Apps. The data you can get on those is very uniform and it should be easy to create a specification for those.
What is the preffered way to contribute? Should I open an issue to discuss my ideas, discuss them here or start writing the specifications I think are needed and then discuss in the PR?
Specifically I'm looking into creating an SBOM for a Windows 10 System and would like to add a type for Store Apps. The data you can get on those is very uniform and it should be easy to create a specification for those.
Hi @pombredanne . Ok, then I'll do that.
Appearantly there is https://lazyadmin.nl/it/install-microsoft-store-apps-without-store/ ^^
Appearantly there is https://lazyadmin.nl/it/install-microsoft-store-apps-without-store/ ^^
I assume that there is likely some recipe to automatically derive these