Adopters

(alphabetical order)

• CycloneDX: A lightweight software bill-of-material (SBOM) specification
• Ecosyste.ms: Indexes and analyzes open source packages, ecosystems, and their dependencies.
• GitHub Dependency Submission API: allows third-party tools to submit dependency data to GitHub for inclusion in a repository's dependency graph.
• OSS Index: A free catalog of Open Source Components and scanning tools to help developers identify vulnerable components
• OSS Review Toolkit: A suite of tools to assist with automating Open Source compliance checks.
• OSV Schema and OSV.dev: Open Source Vulnerability Schema and distributed vulnerability database
• OWASP Dependency-Track: Open source component analysis platform
• ReversingLabs Spectra Assure: Software supply chain security platform for the enterprise to detect threats and exposures
• Scancode Toolkit: Reports PURLs from parsed package manifests using https://github.com/package-url/packageurl-python
• Sonatype Nexus Lifecycle: Enterprise grade Open Source component management
• SPDX: A data exchange standard for human-readable and machine-processable software bill-of-materials (SBOM)

See also https://github.com/package-url/purl-spec/blob/main/ADOPTERS.md.