Include the purls of the software in the list

[andrewpollock]

It's great that https://docs.google.com/spreadsheets/d/1ONZ4qeMq8xmeCHX03lIgIYE4MEXVfVL6oj05lbuXTDM/edit#gid=577559548 exists. It'd be helpful for cross-referencing if the purls of each of these were included in the list.

[bureado]

In addition to using purl's github type in most of the rows, I would suggest adding "akas" from other types, specifically Linux packages, Docker, and generic types; and I would also suggest CPEs. Projects that can help with this include:

• https://github.com/scanoss/purl2cpe
• https://github.com/nexB/vulnerablecode-purl2cpe
• https://github.com/repology/repology-rules