Re: Should guix track package aliases?

[Ludovic Courtès]

Hi,

zimoun <zimon.toutoune@gmail.com> skribis:

> On Sun, 10 May 2020 at 12:08, Vincent Legoll <vincent.legoll@gmail.com> wrote:
>
>> Used googl often being used to approximate it, crudely but effectively.
>
> The big question is how to build such database.
> Wikidata?

There’s also the Common Platform Enumeration (CPE), the thing used to
refer to software in the CVE database.

Some of our packages have a ‘cpe-name’ property giving, well, their CPE
name so that ‘guix lint -c cve’ can do the right thing.

I wonder how <https://repology.org/> matches package names among distros
though.

Ludo’.