Post #4193008
2026-07-27 20:24 UTC
@gvwilson@mastodon.social I’m amazed they managed to find that many in the wild, no-one in oss uses them
Replies (1)
-
@michelin@hachyderm.io 2026-07-28 22:00
@andrewnez@mastodon.social @gvwilson@mastodon.social @fedora@fosstodon.org is planning to use https://fedoraproject.org/wiki/Changes/Adopt_PURL_Metadata which is at the very least SBOM adjacent. We find that otherwise each packaging ecosyatem has its own way of specifying dependencies, and this makes it harder for security teams to flag issues accurately