diff --git a/go.mod b/go.mod
index 8aa341f..af07363 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/tidelift/tidelift-sbom-info
 
-go 1.22
+go 1.23
 
 require github.com/CycloneDX/cyclonedx-go v0.9.0 // direct
 
diff --git a/internal/cyclonedx/cyclonedx.go b/internal/cyclonedx/cyclonedx.go
index caf76ee..7a6238e 100644
--- a/internal/cyclonedx/cyclonedx.go
+++ b/internal/cyclonedx/cyclonedx.go
@@ -43,7 +43,7 @@ func decodeCyclonedx(filename string) (*cdx.BOM, error) {
 }
 
 func extractSupportedPurls(bom *cdx.BOM) ([]packageurl.PackageURL, error) {
-	var purls []packageurl.PackageURL
+	purlMap := map[string]packageurl.PackageURL{}
 
 	if bom.Components == nil {
 		log.Warn("CycloneDX file does not have any components")
@@ -70,10 +70,17 @@ func extractSupportedPurls(bom *cdx.BOM) ([]packageurl.PackageURL, error) {
 			continue
 		}
 
+		purlMap[purl.String()] = purl
+	}
+
+	purls := make([]packageurl.PackageURL, 0, len(purlMap))
+
+	for _, purl := range purlMap {
 		purls = append(purls, purl)
 	}
 
 	log.Debug(fmt.Sprintf("Found %d purls\n", len(purls)))
+
 	return purls, nil
 }