Repository source link for the dependency file. #1094
Replies: 2 comments
-
If the component has a Package URL, then yes, you can determine where the package location is. Per the purl spec, Maven Central is the default repo for Maven components. So any component without an alternative Also, please note that https://mvnrepository.com/artifact/net.bytebuddy/byte-buddy isn't a repo link. It's not even a repo. Its an index to other repos. In this example, bytebuddy is found in four different public repos including Central, Redhat GA, Redhat EA, and ICM. An example purl for bytebuddy that is pulled from Redhat GA repo for example, would be:
|
Beta Was this translation helpful? Give feedback.
-
Thank you so much for your valuable comments and this guides me in the
right direction! Sorry for the late reply as I was down and out.
…On Thu, Jul 1, 2021 at 8:20 PM Steve Springett ***@***.***> wrote:
If the component has a Package URL, then yes, you can determine where the
package location is. Per the purl spec, Maven Central is the default repo
for Maven components. So any component without an alternative
repository_url would be using Central. For the components that have a
repository_url specified, you should use that value.
Also, please note that
https://mvnrepository.com/artifact/net.bytebuddy/byte-buddy isn't a repo
link. It's not even a repo. Its an index to other repos. In this example,
bytebuddy is found in four different public repos including Central, Redhat
GA, Redhat EA, and ICM.
An example purl for bytebuddy that is pulled from Redhat GA repo for
example, would be:
***@***.***?repository_url=maven.repository.redhat.com/ga/
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
<#1094 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/ARGHBGAPCIFILJYOG2G3Z6DTVR6ELANCNFSM47TZFPXQ>
.
|
Beta Was this translation helpful? Give feedback.
-
Is there a way to get the repository source link for the dependency file e.g. bytebuddy dependency and the repository link would be https://mvnrepository.com/artifact/net.bytebuddy/byte-buddy? Thanks for considering!
Beta Was this translation helpful? Give feedback.
All reactions