Coordinates system used by Sonatype OSS Index
Sonatype OSS Index uses Package-URL Specification to describe the coordinates of components (aka packages).
Component and package are interchangeable terms.
A package-url (or purl) is a URI composed of six coordinate parts prefixed by pkg scheme:
A package-url with-out pkg scheme is also supported for backwards compatibility:
Coordinate parts are separated by a specific character for unambiguous parsing:
The component "type" or "format" such as maven, npm, nuget, gem, pypi, etc.
Some name prefix such as a Maven group-id, a NPM package scope, or a Docker image owner.
Optional and type-specific
The name of the component.
The version of the component.
Extra qualifying data for a component such as an OS, architecture, a distro, etc.
Optional, type-specific, ignored
Extra sub-path within a component, relative to the package root.