helper-cli: Allow to specify purls in package lists used for creating analyzer results

.mailmap

@@ -10,6 +10,7 @@ dependabot[bot] <dependabot[bot]@users.noreply.github.com> <49699333+dependabot[
 Frank Viernau <[email protected]> <[email protected]>
 Frank Viernau <[email protected]> <[email protected]>
 Frank Viernau <[email protected]> <[email protected]>
+Frank Viernau <[email protected]> <[email protected]>
 François Barbe <[email protected]>
 François Barbe <[email protected]> <[email protected]>
 François Barbe <[email protected]> <[email protected]>

helper-cli/src/funTest/assets/create-analyzer-result-from-pkg-list-expected-output.yml

@@ -56,7 +56,7 @@ analyzer:
           linkage: "STATIC"
     packages:
     - id: "NPM::example-dependency-one:1.0.0"
-      purl: ""
+      purl: "pkg:npm/[email protected]"
       declared_licenses: []
       declared_licenses_processed: {}
       description: ""
@@ -82,7 +82,7 @@ analyzer:
         revision: "0000000000000000000000000000000000000000"
         path: "vcs-path/dependency-one"
     - id: "NPM::example-dependency-two:2.0.0"
-      purl: ""
+      purl: "pkg:github/example-org/[email protected]"
       declared_licenses: []
       declared_licenses_processed: {}
       description: ""

helper-cli/src/funTest/assets/package-list.yml

@@ -17,6 +17,7 @@ dependencies:
     isExcluded: true
     isDynamicallyLinked: true
   - id: "NPM::example-dependency-two:2.0.0"
+    purl: "pkg:github/example-org/[email protected]"
     vcs:
       type: "Git"
       url: "https://github.com/example/depedency-1.git"

helper-cli/src/main/kotlin/commands/CreateAnalyzerResultFromPackageListCommand.kt

@@ -51,6 +51,7 @@
 import org.ossreviewtoolkit.model.config.ScopeExcludeReason
 import org.ossreviewtoolkit.model.mapper
 import org.ossreviewtoolkit.model.orEmpty
+import org.ossreviewtoolkit.model.utils.toPurl
 import org.ossreviewtoolkit.plugins.packagecurationproviders.api.PackageCurationProviderFactory
 import org.ossreviewtoolkit.utils.common.expandTilde
 import org.ossreviewtoolkit.utils.config.setPackageCurations
@@ -146,6 +147,7 @@
 
 private data class Dependency(
     val id: Identifier,
+    val purl: String?,
     val vcs: Vcs? = null,
     val sourceArtifact: SourceArtifact? = null,
     val isExcluded: Boolean = false,
@@ -190,10 +192,14 @@
 private fun Dependency.toPackage(): Package {
     val vcsInfo = vcs.toVcsInfo()
 
-    return Package.EMPTY.copy(
+    return Package(
         id = id,
+        purl = purl ?: id.toPurl(),
         sourceArtifact = sourceArtifact?.let { RemoteArtifact(url = it.url, it.hash ?: Hash.NONE) }.orEmpty(),
         vcs = vcsInfo,
-        vcsProcessed = vcsInfo.normalize()
+        declaredLicenses = emptySet(),
+        description = "",
+        homepageUrl = "",
+        binaryArtifact = RemoteArtifact.EMPTY
     )
 }