Open
Description
Currently SBOM extractors return the PURL type as the ecosystem which is incorrect, but instead should retrieve the proper ecosystem from the PURL string.
This includes parsing keys like distro=alpine-3.17.2
to get the exact release version (though this is not finalised in the PURL standard.)