Enhancement request: Support submitting NuGet PURLs for scanning with ScanCode.io

[ghsa-retrieval]

Is your enhancement request related to a problem? Please describe.
Currently the scanning of NuGet packages does not seem to work as no scan_single_package is getting triggered.

What are the benefits of the requested enhancement?
Users could benefit from ScanCode.io scanning the package for license information

Describe the solution you would like
Resolve the PURL (example: pkg:nuget/Azure.Core@1.45.0) similar to npm packages so that ScanCode.io can analyze the package. This might also require work on ScanCode.io, since there are open tickets related to NuGet support such as: aboutcode-org/scancode.io#1089

Additional notes
n.a.

[AyanSinhaMahapatra]

This is tracked in aboutcode-org/purldb#467 btw, as this is where it would be implemented

[ghsa-retrieval]

@AyanSinhaMahapatra Perfect, thank you!

[ghsa-retrieval]

@AyanSinhaMahapatra I just realized may have misunderstood your response. My request was about SBOMs being uploaded to DejaCode and then scanned through ScanCode.io, so PurlDB in itself would not be the solution. Currently DejaCode seems to be unable to convert nuget PURLs to download URLs, hence ScanCode.io does not process those packages. So likely this is a change needed in the conversion logic and requires adjustement for purl2url.