When creating a Conclusion at the package level, we should include `purl` as one of the fields of that conclusion. Since we are pulling this value from the ScanCode JSON itself, this value can be should be populated automatically.