- Move benchmarks from v1/topdown to v1/rego to resolve import cycle
- Add comprehensive WASM performance benchmarks as requested:
  * BenchmarkSimpleAuthzTargets: Authorization policy performance
  * BenchmarkBuiltinPerformanceTargets: Builtin function performance
  * BenchmarkDataSizesTargets: Performance with varying data sizes
  * BenchmarkPolicyComplexityTargets: Performance with varying policy complexity
- Use ParsedModule for consistency with existing benchmarks
- Update Makefile bench-wasm target to test both v1/topdown and v1/rego
- Add memory benchmark warning about cgo/wasmtime-go limitations

Addresses review feedback on PR open-policy-agent#7841

Signed-off-by: Anivar <[email protected]>

This PR introduces two new builtin functions for parsing and validating
Package URLs (PURLs), which are commonly used in Software Bill of
Materials (SBOMs) to identify software packages.

New builtins:
- purl.is_valid(string): Validates if a string is a valid PURL
- purl.parse(string): Parses a PURL into its components (type,
  namespace, name, version, qualifiers, subpath)

The implementation vendors the necessary parts of the packageurl-go
library internally to avoid adding external dependencies. Only required
fields (type, name) are returned as static properties, while optional
fields are dynamically added when present, following OPA's pattern of
omitting empty values.

This addresses the need for SBOM validation in supply chain security
policies, enabling OPA to parse and validate package identifiers from
various ecosystems (npm, maven, docker, pypi, etc.) as requested in
issue open-policy-agent#7841.

Includes comprehensive documentation with SBOM policy examples and
test coverage for various PURL types.

Fixes open-policy-agent#7841

Signed-off-by: Anivar Aravind <[email protected]>

This PR introduces two new builtin functions for parsing and validating
Package URLs (PURLs), which are commonly used in Software Bill of
Materials (SBOMs) to identify software packages.

New builtins:
- purl.is_valid(string): Validates if a string is a valid PURL
- purl.parse(string): Parses a PURL into its components (type,
  namespace, name, version, qualifiers, subpath)

The implementation vendors the necessary parts of the packageurl-go
library internally to avoid adding external dependencies. Only required
fields (type, name) are returned as static properties, while optional
fields are dynamically added when present, following OPA's pattern of
omitting empty values.

This addresses the need for SBOM validation in supply chain security
policies, enabling OPA to parse and validate package identifiers from
various ecosystems (npm, maven, docker, pypi, etc.) as requested in
issue open-policy-agent#7841.

Includes comprehensive documentation with SBOM policy examples and
test coverage for various PURL types.

Fixes open-policy-agent#7841

Signed-off-by: Anivar A Aravind <[email protected]>

This PR introduces two new builtin functions for parsing and validating
Package URLs (PURLs), which are commonly used in Software Bill of
Materials (SBOMs) to identify software packages.

New builtins:
- purl.is_valid(string): Validates if a string is a valid PURL
- purl.parse(string): Parses a PURL into its components (type,
  namespace, name, version, qualifiers, subpath)

The implementation vendors the necessary parts of the packageurl-go
library internally to avoid adding external dependencies. Only required
fields (type, name) are returned as static properties, while optional
fields are dynamically added when present, following OPA's pattern of
omitting empty values.

This addresses the need for SBOM validation in supply chain security
policies, enabling OPA to parse and validate package identifiers from
various ecosystems (npm, maven, docker, pypi, etc.) as requested in
issue open-policy-agent#7841.

Includes comprehensive documentation with SBOM policy examples and
test coverage for various PURL types.

Fixes open-policy-agent#7841

Signed-off-by: Anivar A Aravind <[email protected]>

This PR introduces two new builtin functions for parsing and validating
Package URLs (PURLs), which are commonly used in Software Bill of
Materials (SBOMs) to identify software packages.

New builtins:
- purl.is_valid(string): Validates if a string is a valid PURL
- purl.parse(string): Parses a PURL into its components (type,
  namespace, name, version, qualifiers, subpath)

The implementation vendors the necessary parts of the packageurl-go
library internally to avoid adding external dependencies. Only required
fields (type, name) are returned as static properties, while optional
fields are dynamically added when present, following OPA's pattern of
omitting empty values.

This addresses the need for SBOM validation in supply chain security
policies, enabling OPA to parse and validate package identifiers from
various ecosystems (npm, maven, docker, pypi, etc.) as requested in
issue open-policy-agent#7841.

Includes comprehensive documentation with SBOM policy examples and
test coverage for various PURL types.

Fixes open-policy-agent#7841

Signed-off-by: Anivar A Aravind <[email protected]>

This PR introduces two new builtin functions for parsing and validating
Package URLs (PURLs), which are commonly used in Software Bill of
Materials (SBOMs) to identify software packages.

New builtins:
- purl.is_valid(string): Validates if a string is a valid PURL
- purl.parse(string): Parses a PURL into its components (type,
  namespace, name, version, qualifiers, subpath)

The implementation vendors the necessary parts of the packageurl-go
library internally to avoid adding external dependencies. Only required
fields (type, name) are returned as static properties, while optional
fields are dynamically added when present, following OPA's pattern of
omitting empty values.

This addresses the need for SBOM validation in supply chain security
policies, enabling OPA to parse and validate package identifiers from
various ecosystems (npm, maven, docker, pypi, etc.) as requested in
issue open-policy-agent#7841.

Includes comprehensive documentation with SBOM policy examples and
test coverage for various PURL types.

Fixes open-policy-agent#7841

Signed-off-by: Anivar A Aravind <[email protected]>