Add Package URL (PURL) display to crate sidebar #11416
Conversation
Turbo87
added
C-enhancement ✨
There was a problem hiding this comment.
👍
One thought I do have is whether we should add some sort of help explaining what this is, since PURLs aren't a super well known concept right now. One thought: could we add a question mark on the right hand side of the PURL that has a hover explaining what a PURL is and why it's useful? Or maybe we have some other way of linking to more information. 🤷
|
|
||
| // Add repository_url query parameter | ||
| const repositoryUrl = `https://${host}/`; | ||
| const separator = purl.includes('?') ? '&' : '?'; |
There was a problem hiding this comment.
It feels like this is redundant, since we can't ever generate a package URL that includes a ? right now?
(I guess, more broadly, I'm not quite clear on why this is separated from the basic PURL generation in the model.)
There was a problem hiding this comment.
I'm not quite clear on why this is separated from the basic PURL generation in the model
I initially implemented the same property on the crate model too and wanted to DRY it up 😉
|
I've added a small help icon next to the PURL now: 
|
This PR adds Package URL (PURL) support to crate pages, enabling better integration with software supply chain and security tools. PURLs follow the format
pkg:cargo/{name}@{version}and are displayed in the sidebar metadata section with click-to-copy functionality.This is a frontend-only implementation that generates PURLs client-side using existing crate data. The display uses ellipsis overflow with a tooltip showing the full PURL.
On
staging.crates.io(and everywhere that is nocrates.ioitself) it will append arepository_urlqualifier (see package-url/purl-spec#215).