[John-David Dalton (jdalton)]

Find organization dependencies by one or more complete package URLs (PURLs), with or without exact versions. Invalid filters fail before a request; results appear only when the server confirms every requested filter.

CVE and free-text search are outside this change.

Implementation and validation

Documentation and dry-run output describe supported filters.

Validation: 16 PURL-helper and CLI unit tests passed. TypeScript, changed-file lint, distribution bundling, and git diff --check passed.

Automated review notes

---

[!NOTE]
Low Risk
Scoped CLI and API-parameter changes with strict local validation; no auth or data-model changes, with solid test coverage.

Overview
Adds --purls to socket organization dependencies so inventory can be narrowed to one or more full package URLs (repeat the flag for multiple packages). Versions may be included or omitted; qualifiers and subpaths are rejected locally, and bare or malformed values fail before any API call.

The command forwards validated PURLs to searchDependencies and refuses to show rows if the response’s purlFilters does not exactly confirm every requested filter. JSON output documents data.purlFilters when filtering is used. --offset help text is corrected to “number of dependencies to skip,” and docs cover pagination with PURL search.

Unit and CLI tests cover parsing, deduplication, server confirmation, and invalid flag usage (including dry-run paths).

^{Reviewed by Cursor Bugbot for commit 70f3000. Configure here.}