Sebastian Pipping wrote: > > To count into the same bucket we use global identifiers for the > "products" that fall out of a package. Gentoo package "dev-util/git" > can produce product "cpe://a:git:git", Debian's "git-core" can, too. > That string before is a CPE URI [1], a concept close to package naming > in Java. This "intermediate language" allows us to relate package names > from distro X with those of distro Y and answer various questions from > that data. > > To do such mapping we need code (or a "service") that does the mapping > for us and base of collected data that the service can operate on. Both > of these is project "PackageMap" >
Instead of manually populating a database wouldn't it make more sense to parse this information from package metadata.xml? Regards, Petteri
signature.asc
Description: OpenPGP digital signature