home.social

#purl — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #purl, aggregated by home.social.

fetched live
  1. Introducing secdb-cli: ZEN SecDB from your terminal

    Query CVEs and audit your dependencies (in PURL format) without leaving the terminal (CI-friendly gating included).

    v0.1.0 is out now with prebuilt binaries for Linux, macOS, and Windows (AMD64 + ARM64).

    secdb.nttzen.cloud/blog/2026/0
    github.com/giterlizzi/secdb-cli

    #opensource #cli #audit #cve #purl #ci #vulnerability #dependency
    #nttdata #zen #secdb

  2. Introducing secdb-cli: ZEN SecDB from your terminal

    Query CVEs and audit your dependencies (in PURL format) without leaving the terminal (CI-friendly gating included).

    v0.1.0 is out now with prebuilt binaries for Linux, macOS, and Windows (AMD64 + ARM64).

    secdb.nttzen.cloud/blog/2026/0
    github.com/giterlizzi/secdb-cli

    #opensource #cli #audit #cve #purl #ci #vulnerability #dependency
    #nttdata #zen #secdb

  3. Introducing secdb-cli: ZEN SecDB from your terminal

    Query CVEs and audit your dependencies (in PURL format) without leaving the terminal (CI-friendly gating included).

    v0.1.0 is out now with prebuilt binaries for Linux, macOS, and Windows (AMD64 + ARM64).

    secdb.nttzen.cloud/blog/2026/0
    github.com/giterlizzi/secdb-cli

    #opensource #cli #audit #cve #purl #ci #vulnerability #dependency
    #nttdata #zen #secdb

  4. I've been busy with "Package URLs" (PURL) in the last couple of weeks. I wrote my own PURL library and CLI that validates (both syntax and semantic) and fixes faulty PURLs:

    codeberg.org/pft/purl

    I had a lot of interesting discussions with the specification authors/maintainers and learned a lot about PURL and good old URLs. I also got to contribute to the official repo by fixing a number of tests that my library detected as faulty.

    #purl #url #go #cli

  5. I've been busy with "Package URLs" (PURL) in the last couple of weeks. I wrote my own PURL library and CLI that validates (both syntax and semantic) and fixes faulty PURLs:

    codeberg.org/pft/purl

    I had a lot of interesting discussions with the specification authors/maintainers and learned a lot about PURL and good old URLs. I also got to contribute to the official repo by fixing a number of tests that my library detected as faulty.

    #purl #url #go #cli

  6. I've been busy with "Package URLs" (PURL) in the last couple of weeks. I wrote my own PURL library and CLI that validates (both syntax and semantic) and fixes faulty PURLs:

    codeberg.org/pft/purl

    I had a lot of interesting discussions with the specification authors/maintainers and learned a lot about PURL and good old URLs. I also got to contribute to the official repo by fixing a number of tests that my library detected as faulty.

    #purl #url #go #cli

  7. I've been busy with "Package URLs" (PURL) in the last couple of weeks. I wrote my own PURL library and CLI that validates (both syntax and semantic) and fixes faulty PURLs:

    codeberg.org/pft/purl

    I had a lot of interesting discussions with the specification authors/maintainers and learned a lot about PURL and good old URLs. I also got to contribute to the official repo by fixing a number of tests that my library detected as faulty.

    #purl #url #go #cli

  8. Why didn't I use package-url/packageurl-go? Because it does a lot of low level processing (see here for example), that I'm sure Go url.URL already does. After all, the specification clearly states that A PURL is a URL.

    #purl #go #goland

  9. Why didn't I use package-url/packageurl-go? Because it does a lot of low level processing (see here for example), that I'm sure Go url.URL already does. After all, the specification clearly states that A PURL is a URL.

    #purl #go #goland

  10. Why didn't I use package-url/packageurl-go? Because it does a lot of low level processing (see here for example), that I'm sure Go url.URL already does. After all, the specification clearly states that A PURL is a URL.

    #purl #go #goland

  11. Why didn't I use package-url/packageurl-go? Because it does a lot of low level processing (see here for example), that I'm sure Go url.URL already does. After all, the specification clearly states that A PURL is a URL.

    #purl #go #goland

  12. I wanted to make a DB for my SBOMs and ended up with writing a PURL parser. I figured out that canonical PURL strings are the suitable as identifiers.

    #purl #golang #sbom

  13. I wanted to make a DB for my SBOMs and ended up with writing a PURL parser. I figured out that canonical PURL strings are the suitable as identifiers.

    #purl #golang #sbom

  14. I wanted to make a DB for my SBOMs and ended up with writing a PURL parser. I figured out that canonical PURL strings are the suitable as identifiers.

    #purl #golang #sbom

  15. I wanted to make a DB for my SBOMs and ended up with writing a PURL parser. I figured out that canonical PURL strings are the suitable as identifiers.

    #purl #golang #sbom

  16. Mykhailo Drapatyi discusses Ukraine victory plan with NATO and US Europe commander | Ukraine news

    In his first public discussion after taking command, Drapatyi sketched operational priorities and urgent needs. The talk highlighted…
    #NATO #OTAN #Europe #Europa #EU #News #long-rangestrikes #mykhailodrapatyi #mykhailodrapatyinatoeuropepurlukraineairdefenselong-rangestrikes #NATOEurope #news #purl #ukraineairdefense
    europesays.com/nato/9173/

  17. Thursday, July 23, 2026

    Ukrainian defense firm Skyfall unveils new JetKiller interceptor drone . . . . . Ukrainian drones strike oil refinery, explosions seen near 'Russia's Amazon' logistics hub . . . . . 13 more Russian shadow fleet vessels struck in Azov Sea and Black Sea over last 2 days . . . . . Russians are furious about Ukraine's new Commander-in-Chief Drapatyi . . . . . and more

    activitypub.writeworks.uk/2026

  18. Thursday, July 23, 2026

    Ukrainian defense firm Skyfall unveils new JetKiller interceptor drone . . . . . Ukrainian drones strike oil refinery, explosions seen near 'Russia's Amazon' logistics hub . . . . . 13 more Russian shadow fleet vessels struck in Azov Sea and Black Sea over last 2 days . . . . . Russians are furious about Ukraine's new Commander-in-Chief Drapatyi . . . . . and more

    activitypub.writeworks.uk/2026

  19. Thursday, July 23, 2026

    Ukrainian defense firm Skyfall unveils new JetKiller interceptor drone . . . . . Ukrainian drones strike oil refinery, explosions seen near 'Russia's Amazon' logistics hub . . . . . 13 more Russian shadow fleet vessels struck in Azov Sea and Black Sea over last 2 days . . . . . Russians are furious about Ukraine's new Commander-in-Chief Drapatyi . . . . . and more

    activitypub.writeworks.uk/2026

  20. Thursday, July 23, 2026

    Ukrainian defense firm Skyfall unveils new JetKiller interceptor drone . . . . . Ukrainian drones strike oil refinery, explosions seen near 'Russia's Amazon' logistics hub . . . . . 13 more Russian shadow fleet vessels struck in Azov Sea and Black Sea over last 2 days . . . . . Russians are furious about Ukraine's new Commander-in-Chief Drapatyi . . . . . and more

    activitypub.writeworks.uk/2026

  21. Slovenia to allocate $50 mln under PURL program and co-finance construction of three shelters in Ukraine

    Minister of Foreign and European Affairs of the Republic of Slovenia Tone Kajzer announced the allocation of an…
    #Slovenia #SI #Europe #Europa #EU #nato_summit #Novice #PURL #slovenia #Slovenija
    europesays.com/3120480/

  22. The Netherlands has little left to give Ukraine from its own stocks

    Shooting the Dutch Patriot Kit Photo. sergeant-majoor Gerben van Es/Siły zbrojne Holandii The Netherlands has been one of…
    #Netherlands #Nederland #NL #Europe #Europa #EU #Kyiv #NATO #Patriot #PURL #Ukraine
    europesays.com/netherlands/293

  23. Saturday, June 20, 2026

    Moscow Oil Refinery halts operations after largest-ever drone attack on Russian capital . . . . . Zelensky issues ultimatum to Lukashenko over drone-guidance equipment . . . . . Pro-Ukrainian partisans sabotage electric substation powering military plant in southern Russia . . . . . Ukraine launches database with 'deep technical data' of Russian weapons to share with allies . . . and more

    activitypub.writeworks.uk/2026

  24. Saturday, June 20, 2026

    Moscow Oil Refinery halts operations after largest-ever drone attack on Russian capital . . . . . Zelensky issues ultimatum to Lukashenko over drone-guidance equipment . . . . . Pro-Ukrainian partisans sabotage electric substation powering military plant in southern Russia . . . . . Ukraine launches database with 'deep technical data' of Russian weapons to share with allies . . . and more

    activitypub.writeworks.uk/2026

  25. Saturday, June 20, 2026

    Moscow Oil Refinery halts operations after largest-ever drone attack on Russian capital . . . . . Zelensky issues ultimatum to Lukashenko over drone-guidance equipment . . . . . Pro-Ukrainian partisans sabotage electric substation powering military plant in southern Russia . . . . . Ukraine launches database with 'deep technical data' of Russian weapons to share with allies . . . and more

    activitypub.writeworks.uk/2026

  26. Saturday, June 20, 2026

    Moscow Oil Refinery halts operations after largest-ever drone attack on Russian capital . . . . . Zelensky issues ultimatum to Lukashenko over drone-guidance equipment . . . . . Pro-Ukrainian partisans sabotage electric substation powering military plant in southern Russia . . . . . Ukraine launches database with 'deep technical data' of Russian weapons to share with allies . . . and more

    activitypub.writeworks.uk/2026

  27. Friday, June 19, 2026

    UK to send Ukraine 150,000 drones, air defense systems using proceeds from frozen Russian assets . . . . . Western allies pledge $4 billion in military aid for Ukraine . . . . . Investigation: How EU machinery keeps feeding Russian missile makers . . . . . Russian attack damages over 40 homes in Kharkiv . . . and more

    activitypub.writeworks.uk/2026

  28. Friday, June 19, 2026

    UK to send Ukraine 150,000 drones, air defense systems using proceeds from frozen Russian assets . . . . . Western allies pledge $4 billion in military aid for Ukraine . . . . . Investigation: How EU machinery keeps feeding Russian missile makers . . . . . Russian attack damages over 40 homes in Kharkiv . . . and more

    activitypub.writeworks.uk/2026

  29. Friday, June 19, 2026

    UK to send Ukraine 150,000 drones, air defense systems using proceeds from frozen Russian assets . . . . . Western allies pledge $4 billion in military aid for Ukraine . . . . . Investigation: How EU machinery keeps feeding Russian missile makers . . . . . Russian attack damages over 40 homes in Kharkiv . . . and more

    activitypub.writeworks.uk/2026

  30. Friday, June 19, 2026

    UK to send Ukraine 150,000 drones, air defense systems using proceeds from frozen Russian assets . . . . . Western allies pledge $4 billion in military aid for Ukraine . . . . . Investigation: How EU machinery keeps feeding Russian missile makers . . . . . Russian attack damages over 40 homes in Kharkiv . . . and more

    activitypub.writeworks.uk/2026

  31. Zelenskyy urges partners not to delay PURL contributions until Ankara summit

    The President of Ukraine Volodymyr Zelenskyy has urged the participants of the Ukraine Defense Contact Group in the…
    #EuropeSays #Turkiye #Ankara #purl
    europesays.com/turkiye/18296/

  32. In the next version, plugins will be scoped!

    I have pushed a major refactor that transforms how we define plugins.

    Before:

    - url: https://gitroot.dev/releases/0.4.0/ladybug-0.0.4.wasm
      checksum: sha256:7409837469ce89d5c9fd8dd48236764650f48523ff4d81295967154977a01635
      name: ladybug
      version: 0.0.4
    

    After:

    - purl: pkg:gitroot/gitroot/[email protected]?registry=gitroot.dev%2Freleases%2F0.4.0&checksum=sha256:7409837469ce89d5c9fd8dd48236764650f48523ff4d81295967154977a01635
    

    This introduces a lot of breaking changes, and I'm sorry about that, but it's for the better! Now, you can take any plugin, modify it, change its scope (called namespace in PURL) in the Makefile, and everything will just work.

    More technical details https://gitroot.dev/CHANGELOG.html#unreleased

    #DevLog #OpenSource #PURL #git #forge #plugin

  33. In the next version, plugins will be scoped!

    I have pushed a major refactor that transforms how we define plugins.

    Before:

    - url: https://gitroot.dev/releases/0.4.0/ladybug-0.0.4.wasm
      checksum: sha256:7409837469ce89d5c9fd8dd48236764650f48523ff4d81295967154977a01635
      name: ladybug
      version: 0.0.4
    

    After:

    - purl: pkg:gitroot/gitroot/[email protected]?registry=gitroot.dev%2Freleases%2F0.4.0&checksum=sha256:7409837469ce89d5c9fd8dd48236764650f48523ff4d81295967154977a01635
    

    This introduces a lot of breaking changes, and I'm sorry about that, but it's for the better! Now, you can take any plugin, modify it, change its scope (called namespace in PURL) in the Makefile, and everything will just work.

    More technical details https://gitroot.dev/CHANGELOG.html#unreleased

    #DevLog #OpenSource #PURL #git #forge #plugin

  34. In the next version, plugins will be scoped!

    I have pushed a major refactor that transforms how we define plugins.

    Before:

    - url: https://gitroot.dev/releases/0.4.0/ladybug-0.0.4.wasm
      checksum: sha256:7409837469ce89d5c9fd8dd48236764650f48523ff4d81295967154977a01635
      name: ladybug
      version: 0.0.4
    

    After:

    - purl: pkg:gitroot/gitroot/[email protected]?registry=gitroot.dev%2Freleases%2F0.4.0&checksum=sha256:7409837469ce89d5c9fd8dd48236764650f48523ff4d81295967154977a01635
    

    This introduces a lot of breaking changes, and I'm sorry about that, but it's for the better! Now, you can take any plugin, modify it, change its scope (called namespace in PURL) in the Makefile, and everything will just work.

    More technical details https://gitroot.dev/CHANGELOG.html#unreleased

    #DevLog #OpenSource #PURL #git #forge #plugin

  35. europesays.com/people/100904/ Zelensky said that Ukraine allocates from $45 to $50 billion per year to the production of various types of weapons #MarkRutte #purl #RussianUkrainianWar

  36. Japan joins PURL programme and allocates first US$14.6m for Ukraine

    Japan has joined the Prioritised Ukraine Requirements List (PURL) programme, allocating over US$14.6 million for the purchase of…
    #EuropeSays #Japan #JP #Japaneseforeignministry #programme #purl #Ukraine #UkrainianArmedForces
    europesays.com/japan/31933/

  37. Saturday, May 30, 2026

    Oreshnik missile 'isn't cutting-edge' as Russia claims, Ukraine says after examining parts -- New territory reported liberated as Ukraine makes fresh offensive push on southern front -- Ukraine's human capital crisis is Europe's threat -- UN blacklists Russian forces over sexual violence against Ukrainian POWs, detainees ... and more

    activitypub.writeworks.uk/2026

  38. Saturday, May 30, 2026

    Oreshnik missile 'isn't cutting-edge' as Russia claims, Ukraine says after examining parts -- New territory reported liberated as Ukraine makes fresh offensive push on southern front -- Ukraine's human capital crisis is Europe's threat -- UN blacklists Russian forces over sexual violence against Ukrainian POWs, detainees ... and more

    activitypub.writeworks.uk/2026

  39. Saturday, May 30, 2026

    Oreshnik missile 'isn't cutting-edge' as Russia claims, Ukraine says after examining parts -- New territory reported liberated as Ukraine makes fresh offensive push on southern front -- Ukraine's human capital crisis is Europe's threat -- UN blacklists Russian forces over sexual violence against Ukrainian POWs, detainees ... and more

    activitypub.writeworks.uk/2026

  40. Saturday, May 30, 2026

    Oreshnik missile 'isn't cutting-edge' as Russia claims, Ukraine says after examining parts -- New territory reported liberated as Ukraine makes fresh offensive push on southern front -- Ukraine's human capital crisis is Europe's threat -- UN blacklists Russian forces over sexual violence against Ukrainian POWs, detainees ... and more

    activitypub.writeworks.uk/2026

  41. Japan allocates $14.7 mln for PURL program

    Japan has allocated $14.7 million to support Ukraine under the Prioritized Ukraine Requirements List (PURL) program, the Japanese…
    #EuropeSays #Japan #JP #purl
    europesays.com/japan/31733/

  42. USA admits Trump admin is already stealing European PURL money to replenish it's own stocks, instead of supplying the agreed (& paid for) weapons.

    Where is Mark Rutte now? Why are you not rising up and scolding "daddy" for abusing the children? 🤨

    #purl #ukraine #nato #nafo #trump #kleptocracy #usisraelwaroniran

  43. USA admits Trump admin is already stealing European PURL money to replenish it's own stocks, instead of supplying the agreed (& paid for) weapons.

    Where is Mark Rutte now? Why are you not rising up and scolding "daddy" for abusing the children? 🤨

    #purl #ukraine #nato #nafo #trump #kleptocracy #usisraelwaroniran

  44. USA admits Trump admin is already stealing European PURL money to replenish it's own stocks, instead of supplying the agreed (& paid for) weapons.

    Where is Mark Rutte now? Why are you not rising up and scolding "daddy" for abusing the children? 🤨

    #purl #ukraine #nato #nafo #trump #kleptocracy #usisraelwaroniran

  45. USA admits Trump admin is already stealing European PURL money to replenish it's own stocks, instead of supplying the agreed (& paid for) weapons.

    Where is Mark Rutte now? Why are you not rising up and scolding "daddy" for abusing the children? 🤨

    #purl #ukraine #nato #nafo #trump #kleptocracy #usisraelwaroniran

  46. USA admits Trump admin is already stealing European PURL money to replenish it's own stocks, instead of supplying the agreed (& paid for) weapons.

    Where is Mark Rutte now? Why are you not rising up and scolding "daddy" for abusing the children? 🤨

    #purl #ukraine #nato #nafo #trump #kleptocracy #usisraelwaroniran