Skip to content
@package-url

Package-URL

A minimal specification and implementation of PURL (Package URL) and VERS (Version Range Specifier)

Welcome to Package-URL on GitHub

Package-URL is an open source community that develops and supports the Package-URL (PURL) and Version Range (VERS) specifications.

  • The PURL specification is an Ecma standard: ECMA-427.
  • The VERS specification will be proposed as an Ecma standard in 2026.
  • Both standards are managed by the Ecma Technical Commmittee 54

We currently host repositories for 12 tools that implement PURL and 2 that implement VERS.

We welcome your participation. Some ways to get started are:

Pinned Loading

  1. purl-spec purl-spec Public

    A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby

    Python 1.1k 247

  2. vers-spec vers-spec Public

    A minimal specification for VERS aka. a "mostly universal" version range specifier , join the discussion at https://join.slack.com/t/aboutcode-org/shared_invite/zt-31uzazd7l-tBHcqKUKkX6jUEPRLswiNw .

    Python 17 11

  3. www.packageurl.org www.packageurl.org Public

    Repository for the Package-URL website - based on Docusaurus.

    HTML 2 4

  4. community community Public

    Repository for discussions and decisions about outreach to the PURL/VERS community.

    2

  5. purl-registry purl-registry Public

    An experimental registry of Package-URLs for software that does not have a package manager/registry.

    6 1

  6. packageurl-python packageurl-python Public

    Python implementation of the package url spec. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ , the Google Summer of Code, nexB and other generous sponsors.

    Python 91 60

Repositories

Showing 10 of 22 repositories
  • purl-spec Public

    A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby

    package-url/purl-spec's past year of commit activity
    Python 1,120 247 155 85 Updated Oct 24, 2026
  • community Public

    Repository for discussions and decisions about outreach to the PURL/VERS community.

    package-url/community's past year of commit activity
    0 2 5 0 Updated Oct 23, 2026
  • purl-registry Public

    An experimental registry of Package-URLs for software that does not have a package manager/registry.

    package-url/purl-registry's past year of commit activity
    6 1 0 1 Updated Oct 23, 2026
  • packageurl-java Public

    Java/JVM implementation of the package url spec

    package-url/packageurl-java's past year of commit activity
    Java 48 MIT 26 8 16 Updated Oct 22, 2026
  • vers-spec Public

    A minimal specification for VERS aka. a "mostly universal" version range specifier , join the discussion at https://join.slack.com/t/aboutcode-org/shared_invite/zt-31uzazd7l-tBHcqKUKkX6jUEPRLswiNw .

    package-url/vers-spec's past year of commit activity
    Python 17 11 18 5 Updated Oct 20, 2026
  • packageurl-dotnet Public

    .NET parser for Package URLs (ECMA-427)

    package-url/packageurl-dotnet's past year of commit activity
    C# 17 MIT 14 1 0 Updated Oct 19, 2026
  • packageurl-php Public

    PHP implementation of the package url spec

    package-url/packageurl-php's past year of commit activity
    PHP 13 MIT 6 4 5 Updated Oct 17, 2026
  • www.packageurl.org Public

    Repository for the Package-URL website - based on Docusaurus.

    package-url/www.packageurl.org's past year of commit activity
    HTML 2 MIT 4 16 1 Updated Oct 17, 2026
  • json-schema-for-humans Public Forked from coveooss/json-schema-for-humans

    Quickly generate HTML documentation from a JSON schema

    package-url/json-schema-for-humans's past year of commit activity
    Python 0 138 0 0 Updated Sep 8, 2026
  • packageurl-js Public

    JavaScript implementation of the package url spec

    package-url/packageurl-js's past year of commit activity
    JavaScript 31 MIT 29 3 6 Updated Aug 24, 2026