chore(deps): remove dep packageurl-js (#220)

Signed-off-by: Jan Kowalleck <[email protected]>

HISTORY.md

@@ -9,6 +9,7 @@ All notable changes to this project will be documented in this file.
 * Dependencies
   * Upgraded runtime-dependency `[email protected]`, was `@6.0.1` (via [#141])  
     This was done to incorporate non-breaking upstream changes and fixes.
+  * Removed unused runtime dependency `packageurl-js` (via [#220])
 * Build
   * Use _TypeScript_ `v5.6.2` now, was `v5.5.3` (via [#160], [#178])
   * Use _@yarnpkg/builder_ `v4.2.0` now, was `v4.1.1` (via [#164], [#172])
@@ -18,6 +19,7 @@ All notable changes to this project will be documented in this file.
 [#164]: https://github.com/CycloneDX/cyclonedx-node-yarn/pull/164
 [#172]: https://github.com/CycloneDX/cyclonedx-node-yarn/pull/172
 [#178]: https://github.com/CycloneDX/cyclonedx-node-yarn/pull/178
+[#220]: https://github.com/CycloneDX/cyclonedx-node-yarn/pull/220
 
 ## 1.0.2 -- 2024-07-15
 

package.json

@@ -62,7 +62,6 @@
     "clipanion": "^4.0.0-rc.3",
     "hosted-git-info": "7.0.2",
     "normalize-package-data": "6.0.2",
-    "packageurl-js": "1.2.1",
     "typanion": "^3.14.0",
     "xmlbuilder2": "3.1.1"
   },

src/builders.ts

@@ -27,7 +27,6 @@ import { Cache, type FetchOptions, type Locator, type LocatorHash, type Package,
 import { ppath } from '@yarnpkg/fslib'
 import { gitUtils as YarnPluginGitUtils } from '@yarnpkg/plugin-git'
 import normalizePackageData from 'normalize-package-data'
-import type { PackageURL } from 'packageurl-js'
 
 import { getBuildtimeInfo } from './_buildtimeInfo'
 import { isString, tryRemoveSecretsFromUrl, trySanitizeGitUrl } from './_helpers'
@@ -256,7 +255,7 @@ export class BomBuilder {
     return component
   }
 
-  private makePurl (component: Component): PackageURL | undefined {
+  private makePurl (component: Component): ReturnType<BomBuilder['purlFactory']['makeFromComponent']> {
     const purl = this.purlFactory.makeFromComponent(component, this.reproducible)
     if (purl === undefined) {
       return undefined