* Raphael Geissert: > It might be worth taking a looking at it, but I expect we will still need > some sort of mapping between the CPE names and the Debian packages names. We can bootstrap that from historic data, I think. However, if NVD lags too much, this is rather pointless.