Exception if #purl is not available

[peschuster]

When a component has no "#purl" (e.g. no version is set), the following line raises an exception:

cyclonedx-node-module/model/Component.js

Line 522 in 7ea9cb5

if (this.#purl || other.#purl) { return this.#purl.localeCompare(other.#purl) }

I'd suggest using && rather than || to fallback to other properties of the module for comparison, if one or the other component has no purl.

[jkowalleck]

PullRequests are welcome

[peschuster]

The packageUrl spec states that the version is optional, but the component model creates the packageUrl only when a version is specified.
Creating purl also when no version is given changes the behavior of the component class. Is this fine or would you prefer to keep the current behavior?

[jkowalleck]

would be fine.

[jkowalleck]

@peschuster are you planning to open a pull request, or should the topic be flagged as "help wanted" ?

[peschuster]

I am not sure about the approach, yet. Building a purl also when no version is set leads to a lot of failing tests.
My latest version just fixes the raised exception. So I will probably create a PR from that.