use purl version ranges

[Scanteianu]

https://github.com/adoptium/temurin-vdr-generator/blob/main/cvereporter/fetch_vulnerabilities.py#L188

[jiekang]

Maybe relevant reading for someone who doesn't know what purl's are?

https://github.com/package-url/purl-spec

Or if you have better links that would be helpful @Scanteianu Thanks!

[Scanteianu]

in this example in the purl readme, they mention github as an example. It's not perfect, but we could use the github as a reference to the open jdk, I guess https://github.com/package-url/purl-spec?tab=readme-ov-file#some-purl-examples

https://github.com/openjdk/jdk

I'm not sure if we get a direct 1:1 mapping from the tags in that repo to jdk url examples. @tellison @smlambert opinions?