Input PURL does not match output PURL

[johnmhoran]

Using the Package API to check for PURLs that are present and might have vulnerabilities, I discovered that for some PURLs like pkg:deb/, the actual correct name requires the debian namespace, which is missing.

[nikkuAg]

Is this issue still open?

[pombredanne]

@nikkuAg I think it is... @johnmhoran @TG1999 any input? Anyone working on this already?

[TG1999]

@nikkuAg you are welcome to work on this.

[nikkuAg]

Could you please explain this issue?

[mjherzog]

VulnerableCode already uses/provides the package namespace correctly so there is nothing to fix here. The work is needed in SCTK - aboutcode-org/scancode-toolkit#3443