Kit readyA weekend
Security & privacy · Anywhere
Security scanners can't match some OSV vulnerability records by package URL because OSV.dev has no conversion for those ecosystems.
Solved looks like
Each remaining ecosystem gets a PURL converter with tests using the type in the PURL spec, or is listed as having no PURL equivalent, and a test fails whenever a new ecosystem is added without either.
Proof1 source · 3 quoted claims · github.com/google · Oct 2026
Market1 reactions on the issue
Kit5 steps · 21 tools · starter prompt ready
- Sourced (done)
- Kit (done)
- Wanted (next)
- Building
- Solved
Be the first to want this solved. Nobody is building it yet.