Bug/sp 3974 missing GitHub packages

CHANGELOG.md

@@ -9,6 +9,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 - Upcoming changes...
 
+## [0.9.0] - 2026/02/02
+### Changed
+- Added support for GitHub PURLs in OSV use case by mapping them to GIT ecosystem with Git URLs
+- Refactored component version resolution in vulnerability use case to use concurrent worker pool
+- Upgraded `/scanoss/go-models` to `v0.3.0` 
+
 ## [0.8.0] - 2026/01/07
 ### Added
 - Included Exploit Prediction Scoring System (EPSS) to vulnerability response
@@ -92,4 +98,5 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 [0.6.1]: https://github.com/scanoss/vulnerabilities/compare/v0.6.0...v0.6.1
 [0.6.2]: https://github.com/scanoss/vulnerabilities/compare/v0.6.1...v0.6.2
 [0.7.0]: https://github.com/scanoss/vulnerabilities/compare/v0.6.2...v0.7.0
-[0.8.0]: https://github.com/scanoss/vulnerabilities/compare/v0.7.0...v0.8.0
+[0.8.0]: https://github.com/scanoss/vulnerabilities/compare/v0.7.0...v0.8.0
+[0.9.0]: https://github.com/scanoss/vulnerabilities/compare/v0.8.0...v0.9.0

go.mod

@@ -8,14 +8,14 @@ require (
 	github.com/Masterminds/semver/v3 v3.4.0
 	github.com/golobby/config/v3 v3.4.2
 	github.com/grpc-ecosystem/go-grpc-middleware v1.4.0
-	github.com/guseggert/pkggodev-client v0.0.0-20240318140526-cdb0034504cf
 	github.com/jmoiron/sqlx v1.4.0
 	github.com/lib/pq v1.10.9
 	github.com/mattn/go-sqlite3 v1.14.32
 	github.com/package-url/packageurl-go v0.1.3
 	github.com/pandatix/go-cvss v0.6.2
 	github.com/scanoss/go-grpc-helper v0.9.0
-	github.com/scanoss/go-models v0.2.0
+	github.com/scanoss/go-models v0.3.0
+	github.com/scanoss/go-purl-helper v0.2.1
 	github.com/scanoss/papi v0.28.0
 	github.com/scanoss/zap-logging-helper v0.4.0
 	go.uber.org/zap v1.27.0
@@ -25,35 +25,21 @@ require (
 
 require (
 	github.com/BurntSushi/toml v1.2.1 // indirect
-	github.com/PuerkitoBio/goquery v1.10.3 // indirect
-	github.com/andybalholm/cascadia v1.3.3 // indirect
-	github.com/antchfx/htmlquery v1.3.4 // indirect
-	github.com/antchfx/xmlquery v1.4.4 // indirect
-	github.com/antchfx/xpath v1.3.5 // indirect
-	github.com/bits-and-blooms/bitset v1.24.0 // indirect
 	github.com/cenkalti/backoff/v4 v4.3.0 // indirect
 	github.com/dustin/go-humanize v1.0.1 // indirect
 	github.com/go-logr/logr v1.4.3 // indirect
 	github.com/go-logr/stdr v1.2.2 // indirect
-	github.com/gobwas/glob v0.2.3 // indirect
-	github.com/gocolly/colly/v2 v2.2.0 // indirect
-	github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
 	github.com/golang/protobuf v1.5.4 // indirect
 	github.com/golobby/cast v1.3.3 // indirect
 	github.com/golobby/dotenv v1.3.2 // indirect
 	github.com/golobby/env/v2 v2.2.4 // indirect
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.1 // indirect
-	github.com/kennygrant/sanitize v1.2.4 // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/ncruces/go-strftime v0.1.9 // indirect
-	github.com/nlnwa/whatwg-url v0.6.2 // indirect
 	github.com/phuslu/iploc v1.0.20230201 // indirect
 	github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
-	github.com/saintfish/chardet v0.0.0-20230101081208-5e3ef4b5456d // indirect
-	github.com/scanoss/go-purl-helper v0.2.1 // indirect
 	github.com/scanoss/ipfilter/v2 v2.0.2 // indirect
-	github.com/temoto/robotstxt v1.1.2 // indirect
 	github.com/tomasen/realip v0.0.0-20180522021738-f0c99a92ddce // indirect
 	go.opentelemetry.io/auto/sdk v1.1.0 // indirect
 	go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0 // indirect
@@ -71,7 +57,6 @@ require (
 	golang.org/x/net v0.43.0 // indirect
 	golang.org/x/sys v0.35.0 // indirect
 	golang.org/x/text v0.28.0 // indirect
-	google.golang.org/appengine v1.6.8 // indirect
 	google.golang.org/genproto/googleapis/api v0.0.0-20250707201910-8d1bb00bc6a7 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20250825161204-c5933d9347a5 // indirect
 	google.golang.org/protobuf v1.36.8 // indirect