purls:
  - pkg:pypi/zstandard
invalid_vendors:
  - facebook
