Skip to content

Commit

Permalink
Apply suggestions from code review
Browse files Browse the repository at this point in the history
Co-authored-by: Emily Casey <emilykimballcasey@gmail.com>
  • Loading branch information
sophiewigmore and ekcasey authored Jul 27, 2021
1 parent 5fc173d commit 90542a7
Showing 1 changed file with 3 additions and 2 deletions.
5 changes: 3 additions & 2 deletions text/0028-bill-of-materials.md
Original file line number Diff line number Diff line change
Expand Up @@ -70,6 +70,7 @@ name = "<dependency name>"
[bom.metadata.source]
name = "<dependency source name>"
purl = "<package URL>"
version = "<dependency source version>",
upstream-version = "<dependency source upstream version>"
```
Expand Down Expand Up @@ -157,10 +158,10 @@ the future, but that change should be communicated in later documentation.
### Package URLs

[Package URLs](https://github.com/package-url/purl-spec) will be provided for
our directly installed dependencies. These types of dependencies (runtime
our directly installed dependencies. Some of these dependencies (runtime
dependencies) do not have explicitly supported types in the [Package URL
Types](https://github.com/package-url/purl-spec/blob/master/PURL-TYPES.rst)
document, so we will use the `generic` or `debian` types as instructed by
document, so we will either use the `generic` type or another type as instructed by
maintainers of the Package URL project. For indirectly installed dependencies,
there are specific types we can use for most of the languages we support (Go
modules, NPM packages, etc.)

0 comments on commit 90542a7

Please sign in to comment.