`dev-vcs/git` package [1] has a CPE identifier in its `metadata.xml` [2]: ``` <pkgmetadata> <upstream> <remote-id type="cpe">cpe:/a:git:git</remote-id> </upstream> </pkgmetadata> ``` But neither the package's page [1] nor Security tab [3] don't display some link to CPE site. Feature request: display some. --- [1] https://packages.gentoo.org/packages/dev-vcs/git [2] https://gitweb.gentoo.org/repo/gentoo.git/tree/dev-vcs/git/metadata.xml?id=25d2c9a326a152e53d1afd3bba406a767e603f72#n38 [3] https://packages.gentoo.org/packages/dev-vcs/git/security
Are these actually useful for humans to grok on packages.g.o? I think CPEs are pretty exclusively used by not-humans.
Implemented. (Can't find commit.)