Package-URL

Welcome to Package-URL on GitHub

Package-URL is an open source community that develops and supports the Package-URL (PURL) and Version Range (VERS) specifications.

  • The PURL specification is an Ecma standard: ECMA-427.
  • The VERS specification will be proposed as an Ecma standard in 2026.
  • Both standards are managed by the Ecma Technical Commmittee 54

We currently host repositories for 12 tools that implement PURL and 2 that implement VERS.

We welcome your participation. Some ways to get started are:

Pinned Loading

  1. A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby

    Python 984 220

  2. A minimal specification for VERS aka. a "mostly universal" version range specifier , join the discussion at https://join.slack.com/t/aboutcode-org/shared_invite/zt-31uzazd7l-tBHcqKUKkX6jUEPRLswiNw .

    Python 8 6

  3. Repository for the Package-URL website - based on Docusaurus.

    HTML 1 2

  4. Repository for discussions and decisions about outreach to the PURL/VERS community.

    2

Repositories

Showing 10 of 21 repositories

  • package-url/packageurl-dotnet’s past year of commit activity

    C#

    16

    MIT

    13 3 5

    Updated Mar 7, 2026

  • package-url/packageurl-go’s past year of commit activity

  • package-url/purl-spec’s past year of commit activity

  • package-url/www.packageurl.org’s past year of commit activity

    HTML

    1

    MIT

    2 15 0

    Updated Mar 6, 2026

  • package-url/vers-spec’s past year of commit activity

    Python

    8 6 20 0

    Updated Mar 5, 2026

  • community Public

    Repository for discussions and decisions about outreach to the PURL/VERS community.

    package-url/community’s past year of commit activity

    0

    2 3 1

    Updated Mar 4, 2026

  • package-url/packageurl-php’s past year of commit activity

    PHP

    13

    MIT

    7 3 1

    Updated Feb 28, 2026

  • purl-registry Public

    An experimental registry of Package-URLs for packages that do not live a registry.

    package-url/purl-registry’s past year of commit activity

    3 1 0 2

    Updated Feb 18, 2026

  • packageurl-js Public

    JavaScript implementation of the package url spec

    package-url/packageurl-js’s past year of commit activity

    JavaScript

    28

    MIT

    25 2 5

    Updated Jan 28, 2026

  • .github Public

    GitHub organization for the PURL and VERS specifications and related projects.

    package-url/.github’s past year of commit activity

    0 0

    0 0

    Updated Jan 6, 2026