Dependency Submission API - Opam Protocol

[smorimoto]

We have just done some work to submit the (still shallow) dependency graph in opam to the DS API. Next we want to make sure the GitHub team is aware of how to get stronger support on the GitHub side.

Currently, we are submitting metadata with the following content.

const purl = new PackageURL(
  "opam",
  null,
  dependency.name,
  dependency.version,
  null,
  null
);

And it's not difficult at all to link this to the official OCaml site, as you can see from its URL schema: https://ocaml.org/p/dune/3.3.1

(From: https://github.com/orgs/community/discussions/19663)

[smorimoto]

Now we have full support in the OCaml ecosystem, at least on our side, can we further support it on the GitHub side?
https://discuss.ocaml.org/t/ann-set-up-ocaml-analysis/13257
CC: @brphelps @courtneycl