Skip to content
@package-url

Package-URL

A minimal specification and implementation of PURL (Package URL) and VERS (Version Range Specifier)
README.md

Welcome to Package-URL on GitHub

Package-URL is an open source community that develops and supports the Package-URL (PURL) and Version Range (VERS) specifications.

  • The PURL specification is an Ecma standard: ECMA-427.
  • The VERS specification will be proposed as an Ecma standard in 2026.
  • Both standards are managed by the Ecma Technical Commmittee 54

We currently host repositories for 12 tools that implement PURL and 2 that implement VERS.

We welcome your participation. Some ways to get started are:

Pinned Loading

  1. purl-spec purl-spec Public

    A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby

    Python 935 215

  2. vers-spec vers-spec Public

    A minimal specification for VERS aka. a "mostly universal" version range specifier , join the discussion at https://join.slack.com/t/aboutcode-org/shared_invite/zt-31uzazd7l-tBHcqKUKkX6jUEPRLswiNw …

    Python 6 6

  3. packageurl.org packageurl.org Public

    Repository for the Package-URL website - based on Docusaurus.

    HTML 1 1

  4. community community Public

    Repository for discussions and decisions about outreach to the PURL/VERS community.

    2

Repositories

Showing 10 of 21 repositories
  • purl-spec Public

    A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby

    package-url/purl-spec’s past year of commit activity
    Python 935 215 156 80 Updated Jan 7, 2026
  • packageurl.org Public

    Repository for the Package-URL website - based on Docusaurus.

    package-url/packageurl.org’s past year of commit activity
    HTML 1 MIT 1 21 0 Updated Jan 7, 2026
  • packageurl-php Public

    PHP implementation of the package url spec

    package-url/packageurl-php’s past year of commit activity
    PHP 11 MIT 7 3 0 Updated Jan 7, 2026
  • .github Public

    GitHub organization for the PURL and VERS specifications and related projects.

    package-url/.github’s past year of commit activity
    0 0 0 0 Updated Jan 6, 2026
  • packageurl-ruby Public

    Ruby implementation of the package url spec

    package-url/packageurl-ruby’s past year of commit activity
    Ruby 10 MIT 4 2 1 Updated Dec 30, 2025
  • community Public

    Repository for discussions and decisions about outreach to the PURL/VERS community.

    package-url/community’s past year of commit activity
    0 2 3 1 Updated Dec 30, 2025
  • purl-registry Public

    An experimental registry of Package-URLs for packages that do not live a registry.

    package-url/purl-registry’s past year of commit activity
    1 0 0 0 Updated Dec 26, 2025
  • packageurl.rs Public Forked from scm-rs/packageurl.rs

    Rust implementation of the Package URL specification.

    package-url/packageurl.rs’s past year of commit activity
    Rust 14 MIT 15 0 0 Updated Dec 8, 2025
  • packageurl-go Public

    Go implementation of the package url spec

    package-url/packageurl-go’s past year of commit activity
    Go 67 MIT 51 11 (5 issues need help) 3 Updated Dec 4, 2025
  • packageurl-python Public

    Python implementation of the package url spec. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ , the Google Summer of Code, nexB and other generous sponsors.

    package-url/packageurl-python’s past year of commit activity
    Python 85 56 46 (2 issues need help) 10 Updated Nov 24, 2025
View all repositories