Upstream author Niels Lohmann just calls the project 'json', which makes it somewhat hard for packaging. We obviously need to explicitly set vendor and product to the ones used in the CPE database in this case.
Link: https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:nlohmann:json Signed-off-by: Alexander Dahl <[email protected]> --- rules/nlohmann-json.make | 1 + 1 file changed, 1 insertion(+) diff --git a/rules/nlohmann-json.make b/rules/nlohmann-json.make index 28693d680..29bd579f9 100644 --- a/rules/nlohmann-json.make +++ b/rules/nlohmann-json.make @@ -23,6 +23,7 @@ NLOHMANN_JSON_SOURCE := $(SRCDIR)/$(NLOHMANN_JSON).$(NLOHMANN_JSON_SUFFIX) NLOHMANN_JSON_DIR := $(BUILDDIR)/$(NLOHMANN_JSON) NLOHMANN_JSON_LICENSE := MIT NLOHMANN_JSON_LICENSE_FILES := file://LICENSE.MIT;md5=3b489645de9825cca5beeb9a7e18b6eb +NLOHMANN_JSON_CVE_PRODUCT := nlohmann:json # ---------------------------------------------------------------------------- # Prepare -- 2.47.3
