Update wrong package ?

[celek ibm]

Hello 

We were looking at VULN named GHSA-wrvw-hg22-4m67 and repo_name maven

We see the package of one entry is google-protobuf

We looked at GHSA-wrvw-hg22-4m67 and for the ecosystem maven we see a different package name

DO we know why the package name is not the one with repo:package ? 

"package": {

"name": "com.google.protobuf:protobuf-java",

"ecosystem": "Maven",

"purl": "pkg:maven/com.google.protobuf/protobuf-java"

},

[Hank Donnay]

I'm not following what's wrong and what's expected.

>--
>You received this message because you are subscribed to the Google Groups "clair-dev" group.
>To unsubscribe from this group and stop receiving emails from it, send an email to clair-dev+...@googlegroups.com.
>To view this discussion on the web visit https://groups.google.com/d/msgid/clair-dev/b0470e35-2e22-4426-9da4-458112d66f0bn%40googlegroups.com.

--
hank