[packagekit] [gentoo-dev] Inviting you to project "PackageMap"

[Petteri Räty]

Sebastian Pipping wrote:
> Petteri Räty wrote:
>> Sebastian Pipping wrote:
>>> To count into the same bucket we use global identifiers for the
>>> "products" that fall out of a package.  Gentoo package "dev-util/git"
>>> can produce product "cpe://a:git:git", Debian's "git-core" can, too.
>>> That string before is a CPE URI [1], a concept close to package naming
>>> in Java.  This "intermediate language" allows us to relate package names
>>> from distro X with those of distro Y and answer various questions from
>>> that data.
>>>
>>> To do such mapping we need code (or a "service") that does the mapping
>>> for us and base of collected data that the service can operate on.  Both
>>> of these is project "PackageMap"
>> Instead of manually populating a database wouldn't it make more sense to
>> parse this information from package metadata.xml?
> 
> Which information exactly?  Please elaborate on that.
> 
> Sebastian
> 

I mean making metadata.xml the authoritative source for mapping CPE to
Gentoo packages. I don't want to see the situation when adding new
packages to the tree would need some mapping being done in an external
web service. We should of course try to provide as much automation as
possible for creating the value for metadata.xml.

Regards,
Petteri

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 261 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freedesktop.org/archives/packagekit/attachments/20090613/7202532b/attachment-0004.pgp>