Skip to content

1.3.2

Choose a tag to compare

View all tags
@oscarvalenzuelab oscarvalenzuelab released this 28 Oct 05:22
· 45 commits to main since this release
v1.3.2
06fbfff
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changelog for v1.3.2 - 2025-10-27

Changed (Project Rebranding)

  • Renamed project from semantic-copycat-src2id to src2purl: Better reflects the tool's focus on Package URL (PURL) generation
  • Updated CLI commands: Changed from src2id to src2purl and src2id -validate to src2purl -validate
  • Updated project metadata:
    • Package name: semantic-copycat-src2id → src2purl
    • Repository URLs updated to point to new src2purl repository
    • Project description updated to emphasize PURL generation capabilities
  • Updated documentation: README, CHANGELOG, and all references updated to reflect new branding
  • Updated CLI display: Version string now shows src2purl v{version} instead of src2id v{version}

Technical

  • All package imports and module structure remain unchanged (src2id.*)
  • Backward compatibility maintained for existing integrations
  • No breaking changes to API or functionality

Additional Enhancements

  • Added UPMEX as a hard dependency: Universal Package Metadata Extractor now guaranteed to be available
  • Enhanced manifest parsing integration: UPMEX was integrated adequately into Phase 2 identification workflow
  • Updated README documentation: Reflects the actual 2-phase discovery process (Hash-based + Manifest-based)
  • Improved package identification: UPMEX provides authoritative manifest data that validates and enhances hash-based findings
Assets 2
Loading