From 933276533604b345c59c4f6794aca07757dd00ca Mon Sep 17 00:00:00 2001
From: Sourabh <sourabh.awashti@harness.io>
Date: Fri, 20 Feb 2026 13:57:03 +0530
Subject: [PATCH] feat:[AH-2596]: fix for npm purl:

---
 registry/app/helpers/pkg/npm.go | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/registry/app/helpers/pkg/npm.go b/registry/app/helpers/pkg/npm.go
index 84e6a56133..4c40edb749 100644
--- a/registry/app/helpers/pkg/npm.go
+++ b/registry/app/helpers/pkg/npm.go
@@ -18,6 +18,7 @@ import (
 	"context"
 	"fmt"
 	"slices"
+	"strings"
 
 	"github.com/harness/gitness/registry/app/api/interfaces"
 	"github.com/harness/gitness/registry/app/api/openapi/contracts/artifact"
@@ -272,5 +273,6 @@ func (c *npmPackageType) GetPurlForArtifact(
 	if version == "" {
 		return "", fmt.Errorf("version cannot be empty")
 	}
-	return fmt.Sprintf("pkg:npm/%s@%s", packageName, version), nil
+	encodedPackageName := strings.ReplaceAll(packageName, "@", "%40")
+	return fmt.Sprintf("pkg:npm/%s@%s", encodedPackageName, version), nil
 }