lampv91

Invalid purl: version must be percent-encoded

1

Hi, I encounter this error: **Invalid purl: version must be percent-encoded** when parse the purl `pkg:npm/@vue/[email protected]` with method `PackageURL.fromString()`. This purl was validated successfully by other library mvn:[email protected] in the...

Invalid purls when scanning Rust(cargo) repository

1

Hi guys, When I scan a Rust(cargo) repository (e.g https://github.com/rust-lang/rustlings), the sbom file result contains these purls: ``` pkg:cargo//[email protected]# pkg:cargo//[email protected]# pkg:cargo//[email protected]# pkg:cargo//[email protected]# pkg:cargo//[email protected]# ``` As per [purl-specification](https://github.com/package-url/purl-spec/blob/master/PURL-SPECIFICATION.rst), these purls seem...

Purl is incorrect when the component name contains uppercase letter

1

It seems like the purl info is always lowercase even when the component name contains uppercase. For example: ``` name": "org.latencyutils.LatencyUtils", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.latencyutils/[email protected]"...

### Describe the bug The paginator of Datatable doesn't work properly when the flag paginator switches from true => false => true and the paginatorTemplate has breakPoints ### Reproducer https://stackblitz.com/edit/primevue-3-vite-issue-template-uluatn?file=src%2FApp.vue...

The Maven dependencies graph is different from other package managers

6

With the release of V3, I see that sbom-tool can generate correct relationships between packages. But somehow the relationship graph of Maven is different from others. For example here is...

Conflict when a package is both direct and transitive

4

When I use sbom-tool v3 to scan a simple python project with requirements.txt containing: ``` Flask Flask-MySQL ``` the relationship graph looks like this:  I expect Flask as a...