3 ms·
Maybe fall into here? >There's even a generic type as a catch-all for things that don't fit an existing ecosystem (for example, a proprietary or legacy compone
by nonethewiser 1y ago
Maybe fall into here?
>There's even a generic type as a catch-all for things that don't fit an existing ecosystem (for example, a proprietary or legacy component) or for ecosystems that build custom distributions, such as yocto or buildroot. We should note, however, that SBOM and software composition analysis tools vary widely in their ability to understand generic PURLs, so we do recommend you talk to your current (or prospective) vendor if this is an important feature for you.
- pombreda 1y agoYou want to avoid the "generic" type... and for docker containers and OCi images that's not needed.