Invalid purl: version must be percent-encoded

[kennylam91]

Hi, I encounter this error: Invalid purl: version must be percent-encoded when parse the purl pkg:npm/@vue/vue-loader-v15@15.11.1 with method PackageURL.fromString().
This purl was validated successfully by other library mvn:packageurl-java@1.4.1 in the backend.

When I look into the code of packageurl-js, I see this:

if (p.includes('@')) {
    let f = p.indexOf('@'),
      u = p.substring(f + 1)
    a = decodeURIComponent(u)
    let y = encodeURIComponent(a).replace(/%3A/g, ':').replace(/%2B/g, '+')
    if (u !== y)
      throw new Error('Invalid purl: version must be percent-encoded')
    i = p.substring(0, f)
}

I think it could have an issue because method indexOf() return the first matched index, but in this case pkg:npm/@vue/vue-loader-v15@15.11.1, it has another @ so f+1 is not the start of version substring.

[steven-esser]

@kennylam91 Thanks for the bug report, will take a look.