We need to consistently use either Package-URL or PURL. Not sure how to fix across the different workflows and commit messages
