You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -181,10 +182,14 @@ When a dependency comes from a non-default registry, the PURL includes a `reposi
181
182
typeParseResultstruct {
182
183
Ecosystemstring// npm, gem, pypi, golang, cargo, etc.
183
184
KindKind// manifest, lockfile, or supplement
185
+
Namestring// the package's own name, when the format declares one
186
+
Versionstring// the package's own version, when declared
184
187
Dependencies []Dependency
185
188
}
186
189
```
187
190
191
+
`Name` and `Version` are populated for manifest formats that declare their own package identity (Cargo.toml `[package]`, package.json `"name"`, go.mod `module`, `.gemspec`, and so on). They are empty for lockfiles and for dependency-only files like Gemfile or requirements.txt.
0 commit comments