install

Additional install commands

Portable and language managers

npmverified · 100%

npm install -g purl

local npm package metadata

overview

Package summary

a PURL ( https://tc54.org/purl/ ) parser and serializer

Project links

Commands and aliases

purl

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for purl. Nucleus package metadata is still published here so future coverage has a stable package URL.

Install behavior

npm lifecycle scripts are declared: prepublish.
No npm postinstall script is recorded in package metadata.
No Homebrew bottle metadata was recorded.
Installs with 2 runtime dependencies.
Build metadata lists 14 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

Command	Kind	Exposure	Note
`purl`	cli	global executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-09

manager version2.1.0

manager updated2026-06-18

local dataok

upstreamnot checked

latest detectednot detected

https://github.com/ljharb/purl

infoNo cached GitHub release or tag data was available.https://github.com/ljharb/purlnone confidence

install metadata

Package metadata

Package key	npm:purl
Version	2.1.0
Package manager	npm
Package manager page	https://www.npmjs.com/package/purl
Homepage	https://github.com/ljharb/purl#readme
Repository	https://github.com/ljharb/purl
Upstream docs	https://github.com/ljharb/purl#readme
License	MIT
Source archive	https://registry.npmjs.org/purl/-/purl-2.1.0.tgz
Issue tracker	https://github.com/ljharb/purl/issues
Last updated	2026-06-18T18:45:46.470Z
Published	2026-01-14T18:36:44.710Z
Pulse	updated
Dependencies	npm-package-arg, pargs
Build dependencies	@arethetypeswrong/cli, @ljharb/eslint-config, @ljharb/tsconfig, @types/node, @types/npm-package-arg, @types/tape, auto-changelog, c8, eslint, in-publish, npmignore, safe-publish-latest, tape, typescript
Bottle	not recorded
npm postinstall	not defined
Service	none declared
Keywords	purl, package url, package, url, ecma-427

registry facts

Source database details

Source Database	npm registry
Dist Tags	Latest 2.1.0
Version Count	7
Maintainers	ljharb
Author	Jordan Harband
Publisher	ljharb
Engines	Node ^22.21 \|\| ^24.11 \|\| >= 25.2
Integrity	sha512-VaLTxYl+NHMlwANo0uYlH4aDsnzdWfC9Yf7u4jTew7rDLb4DDyIHBkXo+fuXUS5cN6AlqAokTw91p4i9ofHk/Q==
Shasum	53708f6287ea185943b413839870f742722f42d3
Unpacked Size	102,829
File Count	0
Created At	2012-04-12T07:10:33.668Z
Latest Published At	2026-01-14T18:36:44.710Z
Modified At	2026-01-14T18:36:44.820Z

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Debian apt95%

python3-purl 1.6-1

URL interrogation and manipulation (Python3 version)

https://codeinthehole.com/writing/purl-immutable-url-objects-for-python/

sudo apt install python3-purl

Section: python
Architecture: all
Source Package: purl
2 dependencies
normalized package name match
Matched by: Purl

Debian stable package indexes · deb.debian.org · Debian stable package indexes: python3-purl from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

Ubuntu apt95%

python3-purl 1.6-1

URL interrogation and manipulation (Python3 version)

https://codeinthehole.com/writing/purl-immutable-url-objects-for-python/

sudo apt install python3-purl

Section: universe/python
Architecture: all
Source Package: purl
2 dependencies
normalized package name match
Matched by: Purl

Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: python3-purl from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz

MacPorts95%

purl

sudo port install purl

normalized package name match
Matched by: Purl

MacPorts ports tree · api.github.com · MacPorts ports tree: finance/purl/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

Nucleus package database
av.db category and tag curation
cross-ecosystem install command graph
external package-manager database matches
package relationship graph
package version freshness
package-page enrichment

Install purl with npm