Which repo to link?

[tschmidtb51]

I currently see VERS in two repos:

1. https://github.com/package-url/purl-spec/blob/main/VERSION-RANGE-SPEC.rst
2. https://github.com/package-url/vers-spec/blob/main/VERSION-RANGE-SPEC.rst

I want to link to it: Which repo should I use?

Flagging @pombredanne

[mjherzog]

@tschmidtb51 You should use the vers-spec repo for this but VERSION-RANGE-SPEC.rst will also be obsolete in the near future so it would be better to refer to the vers-spec repo rather than this file. As we set up for Ecma standardization in Q4-2025/Q1-2026, the content of VERSION-RANGE-SPEC.rst file will be split into multiple markdown files as we have recently done for purl-spec.
We will keep the file itself in both repos for at least the remainder of 2025, but the content will be a redirect to the corresponding new documentation.

[tschmidtb51]

@mjherzog Thank you for the fast reply.

[rjb4standards]

Does anyone know of any plans to support the VERSION-RANGE-SPEC within the NIST NVD or other CVE reporting platform search functions, i.e. EUVD? I'm hoping to be able to search these vulnerability databases across multiple versions, i.e. show my all the CVE's for Version 5.0.0 to 7.0.0 of Product P.