BUG: creating package brow6el-main.tar.gz generates unexpected PURL values #449

Activity

1. DennisClark

   added

   bugSomething isn't workingSomething isn't working

   enhancementNew feature or requestNew feature or request

   design neededDesign details needed to complete the issueDesign details needed to complete the issue

   on Jan 2, 2026
2. DennisClark

   assigned

   tdruez

   on Jan 2, 2026
3. DennisClark

   added this to 00-AboutCodePlanneron Jan 2, 2026
4. DennisClark

   moved this to Todo ready in 00-AboutCodePlanneron Jan 2, 2026
5. tdruez commented on Jan 5, 2026

   

   tdruez

   on Jan 5, 2026

   Contributor

   More actions

   @DennisClark The "Download URL" to "PURL" is handled by the packageurl-python library.

   The packageurl-python is only aware of the provided Download URL string: https://codeberg.org/janantos/brow6el/archive/main.tar.gz

   To figure out the brow6el-main.tar.gz filename value, an HTTP request is required.

   Note that DejaCode does this HTTP request to get and set the filename value of the Package model but it does not mess with the PURL values as it relies on the packageurl-python library output.

   The Name value in the PURL should be brow6el-main-tar-gz rather than main.tar.gz

   I don't remember seeing this syntax for a Package name before. The package name here seems to be brow6el.

   ---

   A better PURL for this should be something like pkg:codeberg/janantos/brow6el@main but this would need to happen on the packageurl-python side first.
6. DennisClark commented on Jan 5, 2026

   

   DennisClark

   on Jan 5, 2026

   MemberAuthor

   More actions

   @tdruez thanks for the explanation
7. DennisClark commented on Jan 5, 2026

   

   DennisClark

   on Jan 5, 2026

   MemberAuthor

   More actions

   new issue created package-url/packageurl-python#222