Skip to content

Package name validation improvements

Problem

We use a single regex for validating the package name for all package types except for Conan. Each package type has it's own rules and conventions that may or may not mix well with the other package types.

Solution

It's likely that each package manager has naming rules and conventions in place built into the client or public registry server. We should find out what those are and create similar regex patterns for validating each package type separately rather than trying to combine all of the rules in one regex.

Maven, NPM, NuGet, and PyPI should have their name validated based on their specific regex rather than the catchall.

References

Package limit investigation issue

Edited by Steve Abrams