Different Package Manager show different results

[beazt93]

Current Behavior

I am using Qt 6.4.2 from github and wrote the purl manually and got this:
<purl>pkg:github/qt/[email protected]</purl>
This only shows that the version is outdated, but 0 vulnerabilities

but if I use a different package manager, for example conan:
<purl>pkg:conan/[email protected]</purl>

This has different results and shows me and 11 vulnerabilities.

What is causing the difference for the same version, but different package manager?

Steps to Reproduce

1. Use <purl>pkg:github/qt/[email protected]</purl>
2. Use <purl>pkg:conan/[email protected]</purl>

Expected Behavior

I am expecting the same results for the same version, the package manager shouldn't have any influence in the result.

Dependency-Track Version

4.12.2

Dependency-Track Distribution

Container Image

Database Server

N/A

Database Server Version

No response

Browser

Microsoft Edge

Checklist

• I have read and understand the contributing guidelines
• I have checked the existing issues for whether this defect was already reported