Should purl url contain the package manager or the repository?

[qvalentin]

Currently the generated spdx sbom can not be used because it defines purl urls with the package manager instead of the repository:

e.g.

pkg:uv/aiofiles@23.2.1

when it should be

pkg:pypi/aiofiles@23.2.1

So the question is if this is intentional or if it should be changed to have the url contain the repository url instead of the specific package manager?