Tag
purl
Safeguard articles tagged "purl" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Concepts
What Is a Package URL (purl)?
A Package URL, or purl, is a standardized string that identifies a software package across any ecosystem. Here's how its structure works and why SBOMs and vulnerability feeds depend on it.
Jul 7, 20266 min read
Vulnerability Management
CPE Naming Convention and the Vulnerability Matching Problem
CPE is the backbone of NVD vulnerability matching, and it is deeply flawed. Understanding its limitations is essential for accurate vulnerability management.
Jun 15, 20226 min read