Dependency Submission API doesn't allow empty purl's

[DmitriyLewen]

Select Topic Area

Question

Body

Hello!

There are times when it is not possible to create purl for packages.
e.g. go version for gobinary doesn't contains info about replaced package name and version:

➜ go version -m ./vault | grep github.com/hashicorp/vault/api -A 1
	dep	github.com/hashicorp/vault/api	v1.12.0
	=>	./api	(devel)	

But i get error when try to add package with empty purl to repository snapshot:

invalid package url: in manifest \"gomod\" decoding \"\": scheme is missing

Docs don't mark package_url field as required:

Is this incorrect check of package_url field or mistake in docs?

Thanks in advance with best regards Dmitriy