packageurl-ruby 0.1.0 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e48cdeff19115a2dbca64c93e81d7cd4de3a45946927157eeba40388de8ec04f
-  data.tar.gz: e94e269df648bade8528f547cfaca06c7e29d8fa23b9f318122d313665da796f
+  metadata.gz: 30f2ee2e31fb703a97ae074c916d1c3f32cf0f449dad38afc147ed3cdf103af0
+  data.tar.gz: 7f691b801b89e59aaba6dee9ada77a077e8112d6d64618dd936db4f73d318ae2
 SHA512:
-  metadata.gz: 92f391f396e54dd47e408cac234d5e4982d5ec91418d0ddb1198d07bc7d58cbea59e7323221f973f54bed72ce78e351c861bdd075ff83940d17cb5290da68fc3
-  data.tar.gz: 4d8e28fbfad4fed559ac1592ba5dc1d38b76f653508409b209b9febd03b5927bef281a36aa830945971bc75eb49a2cf1bc2e45ec2413c2b5444bb8e2f0eca446
+  metadata.gz: ae26ee3f3dedeae6c7369ea2118c1170d3624273b76d12bbb9226bd3c3e68eeeb73a3da9b44e89b3d47af06f10bbe75657a6c9515ccead63ac286c9a58e5735c
+  data.tar.gz: e893c33c957214ebf090e12a527b847c09fc6b6801dedceb9004a6174e3cc35e7146234dc8b6a9cde9ac6171bdc66442d42f70cf4fd1c1dde9f4ed0c062b97bd

data/.github/workflows/ci.yml

@@ -11,10 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        ruby-version: ["2.7", "3.0"]
-
-    env:
-      RUBYOPT: "-W:no-experimental"
+        ruby-version: ["3.2", "3.3", "3.4"]
 
     steps:
       - uses: actions/checkout@v2

data/.rubocop.yml

@@ -1,6 +1,7 @@
 AllCops:
-  TargetRubyVersion: 2.7
+  TargetRubyVersion: 3.2
   NewCops: enable
+  SuggestExtensions: false
 Metrics/AbcSize:
   Enabled: false
 Metrics/BlockLength:
@@ -8,6 +9,7 @@ Metrics/BlockLength:
     - "Rakefile"
     - "**/*.rake"
     - "spec/**/*.rb"
+    - "*.gemspec"
 Metrics/CyclomaticComplexity:
   Enabled: false
 Metrics/ClassLength:
@@ -17,6 +19,6 @@ Metrics/MethodLength:
 Metrics/ParameterLists:
   Max: 7
 Metrics/PerceivedComplexity:
-  Max: 15
+  Max: 30
 Style/ConditionalAssignment:
   Enabled: false

data/.ruby-version

@@ -1 +1 @@
-3.0.1
+3.4.2

data/Gemfile

@@ -7,8 +7,8 @@ gemspec
 gem 'bundler', '~> 2.0'
 gem 'rake', '~> 13.0'
 gem 'rspec', '~> 3.0'
-gem 'rubocop', '~> 1.23.0'
-gem 'rubocop-rake', '~> 0.6.0'
-gem 'rubocop-rspec', '~> 2.6.0'
-gem 'steep', '~> 0.46.0'
+gem 'rubocop', '~> 1.74'
+gem 'rubocop-rake', '~> 0.7'
+gem 'rubocop-rspec', '~> 2.19'
+gem 'steep', '~> 1.10.0'
 gem 'yard', '~> 0.9.0'

data/Gemfile.lock

@@ -1,100 +1,164 @@
 PATH
   remote: .
   specs:
-    packageurl-ruby (0.1.0)
+    packageurl-ruby (0.2.0)
 
 GEM
   remote: https://rubygems.org/
   specs:
-    activesupport (6.1.4.1)
-      concurrent-ruby (~> 1.0, >= 1.0.2)
+    activesupport (8.0.2)
+      base64
+      benchmark (>= 0.3)
+      bigdecimal
+      concurrent-ruby (~> 1.0, >= 1.3.1)
+      connection_pool (>= 2.2.5)
+      drb
       i18n (>= 1.6, < 2)
+      logger (>= 1.4.2)
       minitest (>= 5.1)
-      tzinfo (~> 2.0)
-      zeitwerk (~> 2.3)
-    ast (2.4.2)
-    concurrent-ruby (1.1.9)
-    diff-lcs (1.4.4)
-    ffi (1.15.4)
-    i18n (1.8.11)
+      securerandom (>= 0.3)
+      tzinfo (~> 2.0, >= 2.0.5)
+      uri (>= 0.13.1)
+    ast (2.4.3)
+    base64 (0.2.0)
+    benchmark (0.4.0)
+    bigdecimal (3.1.9)
+    concurrent-ruby (1.3.5)
+    connection_pool (2.5.0)
+    csv (3.3.3)
+    diff-lcs (1.6.0)
+    drb (2.2.1)
+    ffi (1.17.1)
+    ffi (1.17.1-aarch64-linux-gnu)
+    ffi (1.17.1-aarch64-linux-musl)
+    ffi (1.17.1-arm-linux-gnu)
+    ffi (1.17.1-arm-linux-musl)
+    ffi (1.17.1-arm64-darwin)
+    ffi (1.17.1-x86-linux-gnu)
+    ffi (1.17.1-x86-linux-musl)
+    ffi (1.17.1-x86_64-darwin)
+    ffi (1.17.1-x86_64-linux-gnu)
+    ffi (1.17.1-x86_64-linux-musl)
+    fileutils (1.7.3)
+    i18n (1.14.7)
       concurrent-ruby (~> 1.0)
-    language_server-protocol (3.16.0.3)
-    listen (3.7.0)
+    json (2.10.2)
+    language_server-protocol (3.17.0.4)
+    lint_roller (1.1.0)
+    listen (3.9.0)
       rb-fsevent (~> 0.10, >= 0.10.3)
       rb-inotify (~> 0.9, >= 0.9.10)
-    minitest (5.14.4)
-    parallel (1.21.0)
-    parser (3.0.3.0)
+    logger (1.6.6)
+    minitest (5.25.5)
+    mutex_m (0.3.0)
+    parallel (1.26.3)
+    parser (3.3.7.2)
       ast (~> 2.4.1)
-    rainbow (3.0.0)
-    rake (13.0.6)
-    rb-fsevent (0.11.0)
-    rb-inotify (0.10.1)
+      racc
+    racc (1.8.1)
+    rainbow (3.1.1)
+    rake (13.2.1)
+    rb-fsevent (0.11.2)
+    rb-inotify (0.11.1)
       ffi (~> 1.0)
-    rbs (1.7.1)
-    regexp_parser (2.1.1)
-    rexml (3.2.5)
-    rspec (3.10.0)
-      rspec-core (~> 3.10.0)
-      rspec-expectations (~> 3.10.0)
-      rspec-mocks (~> 3.10.0)
-    rspec-core (3.10.1)
-      rspec-support (~> 3.10.0)
-    rspec-expectations (3.10.1)
+    rbs (3.9.0)
+      logger
+    regexp_parser (2.10.0)
+    rspec (3.13.0)
+      rspec-core (~> 3.13.0)
+      rspec-expectations (~> 3.13.0)
+      rspec-mocks (~> 3.13.0)
+    rspec-core (3.13.3)
+      rspec-support (~> 3.13.0)
+    rspec-expectations (3.13.3)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.10.0)
-    rspec-mocks (3.10.2)
+      rspec-support (~> 3.13.0)
+    rspec-mocks (3.13.2)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.10.0)
-    rspec-support (3.10.3)
-    rubocop (1.23.0)
+      rspec-support (~> 3.13.0)
+    rspec-support (3.13.2)
+    rubocop (1.74.0)
+      json (~> 2.3)
+      language_server-protocol (~> 3.17.0.2)
+      lint_roller (~> 1.1.0)
       parallel (~> 1.10)
-      parser (>= 3.0.0.0)
+      parser (>= 3.3.0.2)
       rainbow (>= 2.2.2, < 4.0)
-      regexp_parser (>= 1.8, < 3.0)
-      rexml
-      rubocop-ast (>= 1.12.0, < 2.0)
+      regexp_parser (>= 2.9.3, < 3.0)
+      rubocop-ast (>= 1.38.0, < 2.0)
       ruby-progressbar (~> 1.7)
-      unicode-display_width (>= 1.4.0, < 3.0)
-    rubocop-ast (1.13.0)
-      parser (>= 3.0.1.1)
-    rubocop-rake (0.6.0)
-      rubocop (~> 1.0)
-    rubocop-rspec (2.6.0)
-      rubocop (~> 1.19)
-    ruby-progressbar (1.11.0)
-    steep (0.46.0)
+      unicode-display_width (>= 2.4.0, < 4.0)
+    rubocop-ast (1.41.0)
+      parser (>= 3.3.7.2)
+    rubocop-capybara (2.22.1)
+      lint_roller (~> 1.1)
+      rubocop (~> 1.72, >= 1.72.1)
+    rubocop-factory_bot (2.27.1)
+      lint_roller (~> 1.1)
+      rubocop (~> 1.72, >= 1.72.1)
+    rubocop-rake (0.7.1)
+      lint_roller (~> 1.1)
+      rubocop (>= 1.72.1)
+    rubocop-rspec (2.31.0)
+      rubocop (~> 1.40)
+      rubocop-capybara (~> 2.17)
+      rubocop-factory_bot (~> 2.22)
+      rubocop-rspec_rails (~> 2.28)
+    rubocop-rspec_rails (2.29.1)
+      rubocop (~> 1.61)
+    ruby-progressbar (1.13.0)
+    securerandom (0.4.1)
+    steep (1.10.0)
       activesupport (>= 5.1)
-      language_server-protocol (>= 3.15, < 4.0)
+      concurrent-ruby (>= 1.1.10)
+      csv (>= 3.0.9)
+      fileutils (>= 1.1.0)
+      json (>= 2.1.0)
+      language_server-protocol (>= 3.17.0.4, < 4.0)
       listen (~> 3.0)
-      parallel (>= 1.0.0)
-      parser (>= 3.0)
+      logger (>= 1.3.0)
+      mutex_m (>= 0.3.0)
+      parser (>= 3.1)
       rainbow (>= 2.2.2, < 4.0)
-      rbs (>= 1.2.0)
-      terminal-table (>= 2, < 4)
-    terminal-table (3.0.2)
-      unicode-display_width (>= 1.1.1, < 3)
-    tzinfo (2.0.4)
+      rbs (~> 3.9)
+      securerandom (>= 0.1)
+      strscan (>= 1.0.0)
+      terminal-table (>= 2, < 5)
+      uri (>= 0.12.0)
+    strscan (3.1.2)
+    terminal-table (4.0.0)
+      unicode-display_width (>= 1.1.1, < 4)
+    tzinfo (2.0.6)
       concurrent-ruby (~> 1.0)
-    unicode-display_width (2.1.0)
-    yard (0.9.26)
-    zeitwerk (2.5.1)
+    unicode-display_width (3.1.4)
+      unicode-emoji (~> 4.0, >= 4.0.4)
+    unicode-emoji (4.0.4)
+    uri (1.0.3)
+    yard (0.9.37)
 
 PLATFORMS
-  x86_64-darwin-19
-  x86_64-darwin-20
-  x86_64-linux
+  aarch64-linux-gnu
+  aarch64-linux-musl
+  arm-linux-gnu
+  arm-linux-musl
+  arm64-darwin
+  ruby
+  x86-linux-gnu
+  x86-linux-musl
+  x86_64-darwin
+  x86_64-linux-gnu
+  x86_64-linux-musl
 
 DEPENDENCIES
   bundler (~> 2.0)
   packageurl-ruby!
   rake (~> 13.0)
   rspec (~> 3.0)
-  rubocop (~> 1.23.0)
-  rubocop-rake (~> 0.6.0)
-  rubocop-rspec (~> 2.6.0)
-  steep (~> 0.46.0)
+  rubocop (~> 1.74)
+  rubocop-rake (~> 0.7)
+  rubocop-rspec (~> 2.19)
+  steep (~> 1.10.0)
   yard (~> 0.9.0)
 
 BUNDLED WITH
-   2.2.32
+   2.6.6

data/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2021 package-url
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

data/README.md

@@ -31,7 +31,7 @@ $ gem install packageurl-ruby
 ## Usage
 
 ```ruby
-require 'packageurl-ruby'
+require 'package_url'
 
 purl = PackageURL.parse("pkg:gem/rails@6.1.4")
 purl.type # "gem"

data/Rakefile

@@ -5,10 +5,14 @@ require 'rspec/core/rake_task'
 
 RSpec::Core::RakeTask.new(:spec)
 
+task :lint do
+  system 'rubocop'
+end
+
 namespace :steep do
   task :check do
     system 'steep check'
   end
 end
 
-task default: %i[spec steep:check]
+task default: %i[lint spec steep:check]

data/lib/package_url/version.rb

@@ -2,5 +2,5 @@
 
 class PackageURL
   # :nodoc:
-  VERSION = '0.1.0'
+  VERSION = '0.2.0'
 end

data/lib/package_url.rb

@@ -72,7 +72,14 @@ class PackageURL
   # @raise [InvalidPackageURL] If the string is not a valid package URL.
   # @return [PackageURL]
   def self.parse(string)
-    components = {}
+    components = {
+      type: nil,
+      namespace: nil,
+      name: nil,
+      version: nil,
+      qualifiers: nil,
+      subpath: nil
+    }
 
     # Split the purl string once from right on '#'
     # - The left side is the remainder
@@ -86,9 +93,14 @@ class PackageURL
     # - This is the subpath
     case string.rpartition('#')
     in String => remainder, separator, String => subpath unless separator.empty?
-      components[:subpath] = subpath.split('/').select do |segment|
-        !segment.empty? && segment != '.' && segment != '..'
-      end.compact.join('/')
+      subpath_components = []
+      subpath.split('/').each do |segment|
+        next if segment.empty? || segment == '.' || segment == '..'
+
+        subpath_components << URI.decode_www_form_component(segment)
+      end
+
+      components[:subpath] = subpath_components.compact.join('/')
 
       string = remainder
     else
@@ -145,10 +157,11 @@ class PackageURL
     end
 
     # Strip the remainder from leading and trailing '/'
+    # Use gsub to remove ALL leading slashes instead of just one
+    string = string.gsub(%r{^/+}, '').delete_suffix('/')
     # - Split this once from left on '/'
     # - The left side lowercased is the type
     # - The right side is the remainder
-    string = string.delete_suffix('/')
     case string.partition('/')
     in String => type, separator, remainder unless separator.empty?
       components[:type] = type
@@ -195,8 +208,16 @@ class PackageURL
       components[:namespace] = nil
     end
 
-    new(type: components[:type],
-        name: components[:name],
+    # Ensure type and name are not nil before creating the PackageURL instance
+    raise InvalidPackageURL, 'missing package type' if components[:type].nil?
+    raise InvalidPackageURL, 'missing package name' if components[:name].nil?
+
+    # Create a new PackageURL with validated components
+    type = components[:type] || ''  # This ensures type is never nil
+    name = components[:name] || ''  # This ensures name is never nil
+
+    new(type: type,
+        name: name,
         namespace: components[:namespace],
         version: components[:version],
         qualifiers: components[:qualifiers],
@@ -328,7 +349,13 @@ class PackageURL
       subpath.delete_prefix('/').delete_suffix('/').split('/').each do |segment|
         next if segment.empty? || segment == '.' || segment == '..'
 
-        segments << URI.encode_www_form_component(segment)
+        # Custom encoding for URL fragment segments:
+        # 1. Explicitly encode % as %25 to prevent double-encoding issues
+        # 2. Percent-encode special characters according to URL fragment rules
+        # 3. This ensures proper round-trip encoding/decoding with the parse method
+        segments << segment.gsub(/%|[^A-Za-z0-9\-\._~]/) do |m|
+          m == '%' ? '%25' : format('%%%02X', m.ord)
+        end
       end
 
       unless segments.empty?

data/packageurl-ruby.gemspec

@@ -17,8 +17,9 @@ Gem::Specification.new do |spec|
   DESCRIPTION
 
   spec.homepage = 'https://github.com/package-url/packageurl-ruby'
-  spec.required_ruby_version = Gem::Requirement.new('>= 2.7.0')
+  spec.required_ruby_version = Gem::Requirement.new('>= 3.2.0')
 
+  spec.license = 'MIT'
   spec.metadata['homepage_uri'] = spec.homepage
   spec.metadata['source_code_uri'] = spec.homepage
   spec.metadata['changelog_uri'] = "#{spec.homepage}/blob/main/CHANGELOG.md"

data/sig/package_url.rbs

@@ -1,19 +1,9 @@
-# A package URL, or _purl_, is a URL string used to identify and locate a software package
-# in a mostly universal and uniform way across
-# programing languages, package managers, packaging conventions, tools, APIs and databases.
-#
-# A purl is a URL composed of seven components:
-#
-# ```
-# scheme:type/namespace/name@version?qualifiers#subpath
-# ```
-#
-# For example,
-# the package URL for this Ruby package at version 0.1.0 is
-# `pkg:ruby/mattt/packageurl-ruby@0.1.0`.
 class PackageURL
   VERSION: String
 
+  class InvalidPackageURL < ArgumentError
+  end
+
   def scheme: () -> String
   attr_reader type: String
   attr_reader namespace: String?
@@ -22,23 +12,32 @@ class PackageURL
   attr_reader qualifiers: Hash[String, String]?
   attr_reader subpath: String?
 
-  def initialize: (type: String `type`, 
-                   ?namespace: String? namespace, 
-                   name: String name, 
-                   ?version: String? version, 
-                   ?qualifiers: Hash[String, String]? qualifiers, 
+  def initialize: (type: String `type`,
+                   ?namespace: String? namespace,
+                   name: String name,
+                   ?version: String? version,
+                   ?qualifiers: Hash[String, String]? qualifiers,
                    ?subpath: String? subpath) -> void
-                
-  def self.parse: (String string) -> PackageURL?
 
-  def to_h: () -> { scheme: String, type: String, namespace: String?, name: String?, version: String?, qualifiers: Hash[String, String]?, subpath: String? }
+  def self.parse: (String string) -> PackageURL
+
+  def to_h: () -> { scheme: String,
+                    type: String,
+                    namespace: String?,
+                    name: String?,
+                    version: String?,
+                    qualifiers: Hash[String, String]?,
+                    subpath: String? }
 
-  # Returns a string representation of the package URL.
-  # Package URL representations are created according to the instructions provided at
-  # https://github.com/package-url/purl-spec/blob/0b1559f76b79829e789c4f20e6d832c7314762c5/PURL-SPECIFICATION.rst#how-to-build-purl-string-from-its-components.
   def to_s: () -> String
 
   def deconstruct: () -> Array[String | Hash[String, String] | nil]
 
-  def deconstruct_keys: (Array[Symbol] keys) -> { scheme: String, type: String, namespace: String?, name: String?, version: String?, qualifiers: Hash[String, String]?, subpath: String? }
+  def deconstruct_keys: (Array[Symbol] keys) -> { scheme: String,
+                                                  type: String,
+                                                  namespace: String?,
+                                                  name: String?,
+                                                  version: String?,
+                                                  qualifiers: Hash[String, String]?,
+                                                  subpath: String? }
 end

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: packageurl-ruby
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - Mattt
-autorequire:
 bindir: exe
 cert_chain: []
-date: 2021-12-10 00:00:00.000000000 Z
+date: 2025-03-21 00:00:00.000000000 Z
 dependencies: []
 description: |2
       A package URL, or purl, is a URL string used to
@@ -29,6 +28,7 @@ files:
 - CHANGELOG.md
 - Gemfile
 - Gemfile.lock
+- LICENSE
 - README.md
 - Rakefile
 - Steepfile
@@ -39,10 +39,10 @@ files:
 - packageurl-ruby.gemspec
 - sig/package_url.rbs
 homepage: https://github.com/package-url/packageurl-ruby
-licenses: []
+licenses:
+- MIT
 metadata:
   rubygems_mfa_required: 'true'
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -50,15 +50,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.7.0
+      version: 3.2.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.2.15
-signing_key:
+rubygems_version: 3.6.2
 specification_version: 4
 summary: Ruby implementation of the package url spec
 test_files: []