purl

package

v1.115.0 Latest Latest Go to latest Published: Aug 25, 2026 License: MIT Imports: 6 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

gitlab.com/gitlab-org/cli

Links

Open Source Insights

Documentation ¶

Overview ¶

Package purl parses Package URL (PURL) strings into the subset the Dependency Firewall check command supports: npm, pypi, maven, and gem. It wraps github.com/package-url/packageurl-go and normalises each PURL type's name to its registry form.

Constants ¶

This section is empty.

Variables ¶

View Source

var (
	TypeNpm   = packageurl.TypeNPM
	TypePypi  = packageurl.TypePyPi
	TypeMaven = packageurl.TypeMaven
	TypeGem   = packageurl.TypeGem
)

Supported PURL type identifiers. Values match the package-url spec. Declared as var to match the upstream library, which exposes these as mutable package-level variables rather than untyped constants.

Functions ¶

This section is empty.

Types ¶

type Package ¶

type Package struct {
	Type    string
	Name    string
	Version string
}

Package is a parsed PURL restricted to the types this command supports. Name is the registry-form name (npm scope prefix retained, PEP 503 canonical for pypi, maven "group:artifact" coordinate). Version may be empty when the PURL does not include one.

func Parse ¶

func Parse(s string) (Package, error)

Parse converts a PURL string into a supported Package. It returns an error on parse failures, unsupported types, or type-specific validation failures (for example a maven PURL without a namespace).

Source Files ¶

View all Source files

purl.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL