URI-PackageURL - Perl extension for PURL (Package URL) and VERS (Version Range)

Synopsis

PURL

use URI::PackageURL;

# OO-interface

# Encode components in PURL string
$purl = URI::PackageURL->new(
  type      => 'cpan',
  name      => 'URI-PackageURL',
  version   => '2.26'
);

say $purl; # pkg:cpan/URI-PackageURL@2.26

# Parse a PURL string
$purl = URI::PackageURL->from_string('pkg:cpan/URI-PackageURL@2.26');


# use setter methods

$purl = URI::PackageURL->new(type => 'cpan', name => 'URI-PackageURL');

say $purl; # pkg:cpan/URI-PackageURL
say $purl->version; # undef

$purl->version('2.26');
say $purl; # pkg:cpan/URI-PackageURL@2.26
say $purl->version; # 2.26


# exported functions

$purl = decode_purl('pkg:cpan/URI-PackageURL@2.26');
say $purl->type;  # cpan

$purl_string = encode_purl(type => 'cpan', name => 'URI-PackageURL', version => '2.26');
say $purl_string; # pkg:cpan/URI-PackageURL@2.26

if (! is_purl('https://packageurl.org/')) {
  die "Invalid PURL string";
}


# uses the legacy CPAN PURL type, to be used only for compatibility (will be removed in the future)

$ENV{PURL_LEGACY_CPAN_TYPE} = 1;
URI::PackageURL->new(type => 'cpan', name => 'URI::PackageURL');


# alias

$purl = PURL->new(
  type    => 'cpan',
  name    => 'URI-PackageURL',
  version => '2.26'
);

$purl = PURL->from_string('pkg:cpan/URI-PackageURL@2.26');


# clone

$cloned = $purl->clone;

$cloned->version('1.00');

say $cloned; # pkg:cpan/URI-PackageURL@1.00
say $purl;   # pkg:cpan/URI-PackageURL@2.26

VERS

use URI::VersionRange;

# OO-interface

$vers = URI::VersionRange->new(
  scheme      => 'cpan',
  constraints => ['>2.00']
);

say $vers; # vers:cpan/>2.00

if ($vers->contains('2.10')) {
  say "The version is in range";
}

# Parse "vers" string
$vers = URI::VersionRange->from_string('vers:cpan/>2.00|<2.26');


# exported functions

$vers = decode_vers('vers:cpan/>2.00|<2.26');
say $vers->scheme;  # cpan

$vers_string = encode_vers(scheme => 'cpan', constraints => ['>2.00']);
say $vers_string; # vers:cpan/>2.00

if (! is_vers('3.14')) {
  die "Invalid VERS string";
}


# alias

$vers = VERS->new(
  scheme      => 'cpan',
  constraints => ['>2.00']
);

$vers = VERS->from_string('vers:cpan/>2.00|<2.26');

Command Line

purl-tool a CLI for URI::PackageURL module

Inspect and export "purl" string in various formats (JSON, YAML, Data::Dumper, ENV):

$ purl-tool pkg:cpan/URI-PackageURL@2.26 --json | jq
{
  "name": "URI-PackageURL",
  "namespace": null,
  "qualifiers": {},
  "scheme": "pkg",
  "subpath": null,
  "type": "cpan",
  "version": "2.26"
}

Download package using "purl" string:

$ wget $(purl-tool pkg:cpan/URI-PackageURL@2.26?author=GDT --download-url)

Use "purl" string in your shell-scripts:

#!bash

set -e 

PURL="pkg:cpan/URI-PackageURL@2.26?author=GDT"

eval $(purl-tool "$PURL" --env)

echo "Download $PURL_NAME $PURL_VERSION"
wget $PURL_DOWNLOAD_URL

echo "Build and install module $PURL_NAME $PURL_VERSION"
tar xvf $PURL_NAME-$PURL_VERSION.tar.gz

cd $PURL_NAME-$PURL_VERSION
perl Makefile.PL
make && make install

Create on-the-fly a "purl" string:

$ purl-tool --type cpan \
            --name URI-PackageURL \
            --version 2.26

Validate a PURL string:

if purl-tool "$PURL_STRING" --validate -q; then
    echo "PURL string is valid"
else
    echo "PURL string is not valid"
fi

Display information about provided PURL type (allowed components, repository, examples, etc.):

$ purl-tool --info rpm

Display all known PURL types:

$ purl-tool --list

vers-tool a CLI for URI::VersionRange module

Decode a "vers" string:

$ vers-tool "vers:cpan/1.00|>=2.00|<5.00" | jq

Check if a version is contained within a range:

$ vers-tool "vers:cpan/1.00|>=2.00|<5.00" --contains "2.20"

Humanize "vers":

$ vers-tool "vers:cpan/1.00|>=2.00|<5.00" --human-readable

cpan
- equal 1.00
- greater than or equal 2.00
- less than 5.00

Install

Using Makefile.PL:

To install URI-PackageURL distribution, run the following commands.

perl Makefile.PL
make
make test
make install

Using App::cpanminus:

cpanm URI::PackageURL

Documentation

• perldoc URI::PackageURL
• perldoc URI::VersionRange
• https://metacpan.org/release/URI-PackageURL
• Specification: https://github.com/package-url/purl-spec
• Official Website: https://packageurl.org/
• TC54 - Software and system transparency: https://tc54.org
• ECMA-427 - Package-URL (PURL) specification: https://ecma-international.org/publications-and-standards/standards/ecma-427

Copyright

• Copyright 2022-2026 © Giuseppe Di Terlizzi