[John-David Dalton (jdalton)]

Find organization dependencies by one or more complete package URLs (PURLs), with or without exact versions. Invalid filters fail before a request; results appear only when the server confirms every requested filter.

CVE and free-text search are outside this change.

Implementation and validation

Documentation and dry-run output describe supported filters.

Validation: 11 PURL-helper unit tests and six CLI subprocess tests passed. Type checks, changed-file lint/formatting, and git diff --check passed. The full format check is blocked by existing formatting drift in the unchanged README.

Automated review notes

---

[!NOTE]
Low Risk
Read-only inventory search with stricter local validation and a fail-safe when server filter confirmation mismatches; no auth or data mutation paths.

Overview
Adds PURL-based filtering to socket organization dependencies via a repeatable --purls flag so org inventory can be narrowed to specific packages (with or without an exact version).

CLI behavior: New dependencies-filters.mts validates full pkg: URLs (rejects qualifiers/subpaths, dedupes), treats bare --purls as an error, and passes confirmed filters into searchDependencies. If the API’s purlFilters does not exactly match every requested PURL, the command fails without showing rows. Dry-run and help document the new option; --offset help text is clarified to “skip” semantics. Docs add a “Filter by package” section and note data.purlFilters in JSON output.

Tests: Unit coverage for parsing/confirmation logic and integration cases for dry-run, invalid PURLs, and empty flag usage.

^{Reviewed by Cursor Bugbot for commit 6d14788. Configure here.}