Add some CPEs

mingw-w64-3proxy/PKGBUILD

@@ -11,6 +11,9 @@ arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clangarm64' 'clang32')
 license=('BSD' 'Apache' 'GPL' 'LGPL')
 url="https://github.com/z3APA3A/${_realname}"
+msys2_references=(
+  "cpe: cpe:/a:3proxy:3proxy"
+)
 depends=("${MINGW_PACKAGE_PREFIX}-gcc-libs")
 makedepends=("${MINGW_PACKAGE_PREFIX}-cc")
 source=(${_realname}-${pkgver}.tar.gz::"${url}/archive/${pkgver}.tar.gz"

mingw-w64-7zip/PKGBUILD

@@ -10,6 +10,7 @@ arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 msys2_references=(
   'aur: 7-zip'
+  "cpe: cpe:/a:7-zip:7-zip"
 )
 url="https://7-zip.org"
 license=('spdx:LGPL-2.1-or-later AND BSD-3-Clause')

mingw-w64-SDL/PKGBUILD

@@ -9,6 +9,10 @@ pkgdesc="A library for portable low-level access to a video framebuffer, audio o
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="https://libsdl.org"
+msys2_references=(
+  "cpe: cpe:/a:libsdl:libsdl"
+  "cpe: cpe:/a:libsdl:simple_directmedia_layer"
+)
 license=("LGPL")
 makedepends=("${MINGW_PACKAGE_PREFIX}-cc" "${MINGW_PACKAGE_PREFIX}-autotools" 'git')
 depends=("${MINGW_PACKAGE_PREFIX}-gcc-libs" "${MINGW_PACKAGE_PREFIX}-libiconv")

mingw-w64-SDL2/PKGBUILD

@@ -11,6 +11,8 @@ arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 msys2_references=(
   'archlinux: sdl2'
+  "cpe: cpe:/a:libsdl:libsdl"
+  "cpe: cpe:/a:libsdl:simple_directmedia_layer"
 )
 msys2_repository_url="https://github.com/libsdl-org/SDL/"
 url="https://libsdl.org/"

mingw-w64-SDL2_image/PKGBUILD

@@ -9,6 +9,9 @@ pkgdesc="A simple library to load images of various formats as SDL surfaces (Ver
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="https://github.com/libsdl-org/SDL_image"
+msys2_references=(
+  "cpe: cpe:/a:libsdl:sdl2_image"
+)
 license=('spdx:Zlib')
 depends=("${MINGW_PACKAGE_PREFIX}-SDL2"
          "${MINGW_PACKAGE_PREFIX}-libavif"

mingw-w64-SDL2_ttf/PKGBUILD

@@ -10,6 +10,9 @@ pkgdesc="A library that allows you to use TrueType fonts in your SDL application
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="https://github.com/libsdl-org/SDL_ttf"
+msys2_references=(
+  "cpe: cpe:/a:libsdl:sdl_ttf"
+)
 license=('spdx:Zlib')
 depends=("${MINGW_PACKAGE_PREFIX}-SDL2"
          "${MINGW_PACKAGE_PREFIX}-freetype"

mingw-w64-SDL_image/PKGBUILD

@@ -9,6 +9,10 @@ pkgdesc="A simple library to load images of various formats as SDL surfaces (min
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="https://libsdl.org/projects/SDL_image"
+msys2_references=(
+  "cpe: cpe:/a:libsdl:sdl_image"
+  "cpe: cpe:/a:sdl:sdl_image"
+)
 license=('MIT')
 depends=("${MINGW_PACKAGE_PREFIX}-SDL"
          "${MINGW_PACKAGE_PREFIX}-libjpeg-turbo"

mingw-w64-SDL_ttf/PKGBUILD

@@ -9,6 +9,9 @@ pkgdesc="A library that allows you to use TrueType fonts in your SDL application
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32')
 url="https://libsdl.org/projects/SDL_ttf/"
+msys2_references=(
+  "cpe: cpe:/a:libsdl:sdl_ttf"
+)
 license=("custom")
 makedepends=("${MINGW_PACKAGE_PREFIX}-cc"
              "${MINGW_PACKAGE_PREFIX}-autotools")

mingw-w64-advancecomp/PKGBUILD

@@ -9,6 +9,9 @@ pkgdesc='Recompression utilities for .zip .png .mng and .gz files using the 7-zi
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clangarm64' 'clang32')
 url='http://www.advancemame.it/comp-readme'
+msys2_references=(
+  "cpe: cpe:/a:advancemame:advancecomp"
+)
 license=('spdx:GPL-3.0-or-later')
 depends=("${MINGW_PACKAGE_PREFIX}-gcc-libs"
          "${MINGW_PACKAGE_PREFIX}-zlib")

mingw-w64-antiword/PKGBUILD

@@ -10,6 +10,9 @@ arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 license=('GPL3+')
 url="http://www.winfield.demon.nl/"
+msys2_references=(
+  "cpe: cpe:/a:antiword_project:antiword"
+)
 options=('strip')
 source=("http://www.winfield.demon.nl/linux/${_realname}-${pkgver}.tar.gz"
         "0001-Make-antiword.exe-relocatable-on-Windows.patch")

mingw-w64-apr-util/PKGBUILD

@@ -9,6 +9,9 @@ pkgdesc="The Apache Portable Runtime (mingw-w64)"
 arch=('any')
 mingw_arch=('mingw64' 'ucrt64' 'clang64' 'clangarm64')
 url="https://apr.apache.org/"
+msys2_references=(
+  "cpe: cpe:/a:apache:apr-util"
+)
 license=('spdx:Apache-2.0')
 depends=("${MINGW_PACKAGE_PREFIX}-apr"
          "${MINGW_PACKAGE_PREFIX}-expat"

mingw-w64-apr/PKGBUILD

@@ -9,6 +9,9 @@ pkgdesc="The Apache Portable Runtime (mingw-w64)"
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="https://apr.apache.org/"
+msys2_references=(
+  "cpe: cpe:/a:apache:portable_runtime"
+)
 license=('spdx:Apache-2.0')
 makedepends=("${MINGW_PACKAGE_PREFIX}-cc"
              "${MINGW_PACKAGE_PREFIX}-autotools"

mingw-w64-aria2/PKGBUILD

@@ -12,6 +12,8 @@ url='https://aria2.github.io/'
 msys2_repository_url='https://github.com/aria2/aria2/'
 msys2_references=(
   'archlinux: aria2'
+  "cpe: cpe:/a:aria2_project:aria2"
+  "cpe: cpe:/a:tatsuhiro_tsujikawa:aria2"
 )
 license=('spdx:GPL-2.0-or-later')
 depends=("${MINGW_PACKAGE_PREFIX}-gcc-libs"

mingw-w64-arm-none-eabi-binutils/PKGBUILD

@@ -14,6 +14,9 @@ arch=('any')
 mingw_arch=('mingw64' 'ucrt64' 'clang64' 'clangarm64')
 license=('spdx:GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-3.0-or-later AND LGPL-2.0-or-later')
 url='https://www.gnu.org/software/binutils/binutils.html'
+msys2_references=(
+  "cpe: cpe:/a:gnu:binutils"
+)
 groups=("${MINGW_PACKAGE_PREFIX}-${_target}-toolchain")
 depends=("${MINGW_PACKAGE_PREFIX}-gcc-libs"
          "${MINGW_PACKAGE_PREFIX}-libwinpthread-git"

mingw-w64-arm-none-eabi-gcc/PKGBUILD

@@ -16,6 +16,9 @@ arch=('any')
 mingw_arch=('mingw64' 'ucrt64' 'clang64')
 license=('GPL')
 url='https://www.gnu.org/software/gcc/gcc.html'
+msys2_references=(
+  "cpe: cpe:/a:gnu:gcc"
+)
 groups=("${MINGW_PACKAGE_PREFIX}-${_target}-toolchain")
 provides=($([[ "$_enable_ada" == "yes" ]] && echo "${MINGW_PACKAGE_PREFIX}-${_target}-gcc-ada"))
 depends=(

mingw-w64-arrow/PKGBUILD

@@ -12,6 +12,7 @@ url="https://arrow.apache.org/"
 msys2_repository_url="https://github.com/apache/arrow"
 msys2_references=(
   'archlinux: arrow'
+  "cpe: cpe:/a:apache:arrow"
 )
 license=('spdx:Apache-2.0')
 depends=("${MINGW_PACKAGE_PREFIX}-abseil-cpp"

mingw-w64-aspell/PKGBUILD

@@ -9,6 +9,9 @@ pkgdesc="A spell checker designed to eventually replace Ispell (mingw-w64)"
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="http://aspell.net/"
+msys2_references=(
+  "cpe: cpe:/a:gnu:aspell"
+)
 license=("LGPL")
 makedepends=("${MINGW_PACKAGE_PREFIX}-cc"
              "${MINGW_PACKAGE_PREFIX}-autotools"

mingw-w64-assimp/PKGBUILD

@@ -9,6 +9,9 @@ pkgdesc="Portable Open Source library to import various well-known 3D model form
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="https://www.assimp.org/"
+msys2_references=(
+  "cpe: cpe:/a:assimp:assimp"
+)
 license=('BSD')
 depends=("${MINGW_PACKAGE_PREFIX}-minizip"
          "${MINGW_PACKAGE_PREFIX}-zlib")

mingw-w64-aubio/PKGBUILD

@@ -9,6 +9,9 @@ pkgdesc='A tool for extracting annotations from audio signals (mingw-w64)'
 arch=('any')
 mingw_arch=('mingw64' 'ucrt64' 'clang64' 'clangarm64')
 url='https://aubio.org/'
+msys2_references=(
+  "cpe: cpe:/a:aubio:aubio"
+)
 license=('spdx:GPL-3.0-or-later')
 depends=("${MINGW_PACKAGE_PREFIX}-ffmpeg"
          "${MINGW_PACKAGE_PREFIX}-fftw"

mingw-w64-avr-binutils/PKGBUILD

@@ -12,6 +12,9 @@ arch=('any')
 mingw_arch=('mingw64' 'ucrt64' 'clang64' 'clangarm64')
 license=('spdx:GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-3.0-or-later AND LGPL-2.0-or-later')
 url='https://www.gnu.org/software/binutils/binutils.html'
+msys2_references=(
+  "cpe: cpe:/a:gnu:binutils"
+)
 groups=("${MINGW_PACKAGE_PREFIX}-${_target}-toolchain")
 depends=("${MINGW_PACKAGE_PREFIX}-zstd")
 makedepends=("${MINGW_PACKAGE_PREFIX}-autotools" "${MINGW_PACKAGE_PREFIX}-cc")

mingw-w64-avr-gcc/PKGBUILD

@@ -11,6 +11,9 @@ pkgdesc='GNU compiler collection for AVR 8-bit and 32-bit microcontrollers (ming
 arch=('any')
 mingw_arch=('mingw64' 'ucrt64' 'clang64')
 url='https://www.gnu.org/software/gcc/gcc.html'
+msys2_references=(
+  "cpe: cpe:/a:gnu:gcc"
+)
 license=('spdx:GPL-3.0-or-later')
 groups=("${MINGW_PACKAGE_PREFIX}-${_target}-toolchain")
 depends=("${MINGW_PACKAGE_PREFIX}-${_target}-binutils"

mingw-w64-bat/PKGBUILD

@@ -12,6 +12,7 @@ url='https://github.com/sharkdp/bat'
 msys2_references=(
   'archlinux: bat'
   'purl: pkg:cargo/bat'
+  "cpe: cpe:/a:bat_project:bat"
 )
 license=('spdx:MIT OR Apache-2.0')
 depends=(

mingw-w64-binaryen/PKGBUILD

@@ -10,6 +10,9 @@ pkgdesc="Compiler infrastructure and toolchain library for WebAssembly, in C++ (
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clangarm64' 'clang32')
 url="https://github.com/WebAssembly/binaryen"
+msys2_references=(
+  "cpe: cpe:/a:webassembly:binaryen"
+)
 license=('Apache')
 depends=("${MINGW_PACKAGE_PREFIX}-gcc-libs")
 makedepends=("${MINGW_PACKAGE_PREFIX}-cmake"

mingw-w64-binutils/PKGBUILD

@@ -11,6 +11,9 @@ pkgdesc="A set of programs to assemble and manipulate binary and object files (m
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64')
 url="https://www.gnu.org/software/binutils/"
+msys2_references=(
+  "cpe: cpe:/a:gnu:binutils"
+)
 license=('spdx:GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-3.0-or-later AND LGPL-2.0-or-later')
 groups=("${MINGW_PACKAGE_PREFIX}-toolchain")
 depends=("${MINGW_PACKAGE_PREFIX}-zstd" "${MINGW_PACKAGE_PREFIX}-zlib" "${MINGW_PACKAGE_PREFIX}-gettext-runtime")

mingw-w64-boost/PKGBUILD

@@ -16,6 +16,7 @@ url="https://www.boost.org/"
 msys2_repository_url="https://github.com/boostorg/boost"
 msys2_references=(
   'archlinux: boost'
+  "cpe: cpe:/a:boost:boost"
 )
 license=('spdx:BSL-1.0')
 depends=("${MINGW_PACKAGE_PREFIX}-gcc-libs"

mingw-w64-brotli/PKGBUILD

@@ -11,6 +11,9 @@ pkgdesc="Brotli compression library (mingw-w64)"
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url='https://github.com/google/brotli'
+msys2_references=(
+  "cpe: cpe:/a:google:brotli"
+)
 makedepends=("${MINGW_PACKAGE_PREFIX}-cmake"
              "${MINGW_PACKAGE_PREFIX}-ninja"
              "${MINGW_PACKAGE_PREFIX}-cc"

mingw-w64-bzip2/PKGBUILD

@@ -10,6 +10,9 @@ pkgdesc="A high-quality data compression program (mingw-w64)"
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="https://sourceware.org/bzip2/"
+msys2_references=(
+  "cpe: cpe:/a:bzip:bzip2"
+)
 license=("custom")
 depends=("${MINGW_PACKAGE_PREFIX}-gcc-libs")
 makedepends=("${MINGW_PACKAGE_PREFIX}-cc" "${MINGW_PACKAGE_PREFIX}-autotools")

mingw-w64-c-ares/PKGBUILD

@@ -11,6 +11,8 @@ arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 msys2_references=(
   'archlinux: c-ares'
+  "cpe: cpe:/a:c-ares_project:c-ares"
+  "cpe: cpe:/a:daniel_stenberg:c-ares"
 )
 msys2_repository_url='https://github.com/c-ares/c-ares/'
 msys2_changelog_url='https://c-ares.org/changelog.html'

mingw-w64-capnproto/PKGBUILD

@@ -15,6 +15,9 @@ pkgdesc="Cap'n Proto serialization/RPC system (mingw-w64)"
 arch=('any')
 mingw_arch=('mingw64' 'ucrt64' 'clang64' 'clangarm64')
 url='https://capnproto.org/'
+msys2_references=(
+  "cpe: cpe:/a:capnproto:capnproto"
+)
 license=('spdx:MIT')
 depends=("${MINGW_PACKAGE_PREFIX}-gcc-libs"
          "${MINGW_PACKAGE_PREFIX}-openssl"

mingw-w64-cfitsio/PKGBUILD

@@ -11,6 +11,9 @@ arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="https://heasarc.gsfc.nasa.gov/fitsio/"
 msys2_repository_url='https://github.com/HEASARC/cfitsio'
+msys2_references=(
+  "cpe: cpe:/a:nasa:cfitsio"
+)
 license=("spdx:NASA-1.3")
 makedepends=("${MINGW_PACKAGE_PREFIX}-cmake"
              "${MINGW_PACKAGE_PREFIX}-cc"

mingw-w64-cgal/PKGBUILD

@@ -10,6 +10,9 @@ arch=('any')
 mingw_arch=('mingw64' 'ucrt64' 'clang64' 'clangarm64')
 url="https://www.cgal.org/"
 msys2_repository_url="https://github.com/CGAL/cgal"
+msys2_references=(
+  "cpe: cpe:/a:cgal:computational_geometry_algorithms_library"
+)
 license=("spdx:CC0-1.0 AND BSL-1.0 AND MIT AND LGPL-3.0-or-later AND GPL-3.0-or-later")
 makedepends=("${MINGW_PACKAGE_PREFIX}-cc"
              "${MINGW_PACKAGE_PREFIX}-cmake"

mingw-w64-chafa/PKGBUILD

@@ -10,6 +10,9 @@ arch=('any')
 mingw_arch=('mingw64' 'ucrt64' 'clang64' 'clangarm64')
 msys2_repository_url='https://github.com/hpjansson/chafa'
 url='https://hpjansson.org/chafa/'
+msys2_references=(
+  "cpe: cpe:/a:chafa_project:chafa"
+)
 license=('spdx:LGPL-3.0-or-later')
 depends=("${MINGW_PACKAGE_PREFIX}-cairo"
          "${MINGW_PACKAGE_PREFIX}-freetype"

mingw-w64-chicken/PKGBUILD

@@ -9,6 +9,9 @@ pkgdesc='Feature rich R5RS Scheme compiler and interpreter (mingw-w64)'
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clangarm64' 'clang32')
 url='https://call-cc.org/'
+msys2_references=(
+  "cpe: cpe:/a:call-cc:chicken"
+)
 license=('BSD')
 makedepends=("${MINGW_PACKAGE_PREFIX}-cc")
 source=("https://code.call-cc.org/releases/$pkgver/${_realname}-$pkgver.tar.gz")

mingw-w64-civetweb/PKGBUILD

@@ -9,6 +9,9 @@ pkgdesc="Embedded C/C++ web server (mingw-w64)"
 arch=(any)
 mingw_arch=('mingw64' 'ucrt64' 'clang64' 'clangarm64')
 url="https://github.com/civetweb/civetweb"
+msys2_references=(
+  "cpe: cpe:/a:civetweb_project:civetweb"
+)
 license=("spdx:MIT")
 depends=("${MINGW_PACKAGE_PREFIX}-openssl"
          "${MINGW_PACKAGE_PREFIX}-libwinpthread-git")

mingw-w64-cjson/PKGBUILD

@@ -9,6 +9,9 @@ pkgdesc="Ultralightweight JSON parser in ANSI C (mingw-w64)"
 arch=(any)
 mingw_arch=('mingw64' 'ucrt64' 'clang64' 'clangarm64')
 url="https://github.com/DaveGamble/cJSON"
+msys2_references=(
+  "cpe: cpe:/a:cjson_project:cjson"
+)
 license=('spdx:MIT')
 depends=("${MINGW_PACKAGE_PREFIX}-gcc-libs")
 makedepends=("${MINGW_PACKAGE_PREFIX}-cc"

mingw-w64-confuse/PKGBUILD

@@ -9,6 +9,9 @@ pkgdesc='Library for parsing configuration files (mingw-w64)'
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clangarm64' 'clang32')
 url="https://github.com/martinh/libconfuse"
+msys2_references=(
+  "cpe: cpe:/a:libconfuse_project:libconfuse"
+)
 license=('custom')
 makedepends=("${MINGW_PACKAGE_PREFIX}-cc" "${MINGW_PACKAGE_PREFIX}-autotools" "${MINGW_PACKAGE_PREFIX}-gettext-tools")
 depends=("${MINGW_PACKAGE_PREFIX}-gettext-runtime")

mingw-w64-crypto++/PKGBUILD

@@ -9,6 +9,9 @@ pkgdesc="Crypto++ Library is a free C++ class library of cryptographic schemes (
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="https://www.cryptopp.com/"
+msys2_references=(
+  "cpe: cpe:/a:cryptopp:crypto%2b%2b"
+)
 license=('spdx:BSL-1.0')
 depends=("${MINGW_PACKAGE_PREFIX}-gcc-libs")
 makedepends=("${MINGW_PACKAGE_PREFIX}-cc"

mingw-w64-curl/PKGBUILD

@@ -14,7 +14,11 @@ url="https://curl.se/"
 msys2_repository_url="https://github.com/curl/curl"
 msys2_changelog_url="https://curl.se/changes.html"
 msys2_references=(
+  "cpe: cpe:/a:curl:curl"
+  "cpe: cpe:/a:curl:libcurl"
   "cpe: cpe:/a:haxx:curl"
+  "cpe: cpe:/a:haxx:libcurl"
+  "cpe: cpe:/a:libcurl:libcurl"
 )
 license=("spdx:MIT")
 _cert_depends=("${MINGW_PACKAGE_PREFIX}-ca-certificates"

mingw-w64-cyrus-sasl/PKGBUILD

@@ -30,6 +30,11 @@ pkgdesc="Cyrus Simple Authentication Service Layer (SASL) library (mingw-w64)"
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="https://www.cyrusimap.org/sasl/"
+msys2_references=(
+  "cpe: cpe:/a:carnegie_mellon_university:cyrus-sasl"
+  "cpe: cpe:/a:cyrus:sasl"
+  "cpe: cpe:/a:cyrusimap:cyrus-sasl"
+)
 license=('custom')
 depends=("${MINGW_PACKAGE_PREFIX}-gdbm"
          "${MINGW_PACKAGE_PREFIX}-openssl"

mingw-w64-dav1d/PKGBUILD

@@ -9,6 +9,9 @@ pkgdesc="AV1 cross-platform decoder focused on speed and correctness (mingw-w64)
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url='https://code.videolan.org/videolan/dav1d'
+msys2_references=(
+  "cpe: cpe:/a:videolan:dav1d"
+)
 license=('spdx:BSD-2-Clause')
 makedepends=("${MINGW_PACKAGE_PREFIX}-pkgconf"
              $( [[ "${CARCH}" != "i686" \

mingw-w64-db/PKGBUILD

@@ -11,6 +11,9 @@ pkgdesc="The Berkeley DB embedded database system (mingw-w64)"
 arch=('any')
 mingw_arch=('mingw64' 'ucrt64' 'clang64' 'clangarm64')
 url="https://www.oracle.com/technetwork/database/database-technologies/berkeleydb/overview/index.html"
+msys2_references=(
+  "cpe: cpe:/a:oracle:berkeley_db"
+)
 license=('custom')
 depends=("${MINGW_PACKAGE_PREFIX}-gcc-libs"
          "${MINGW_PACKAGE_PREFIX}-libwinpthread-git")

mingw-w64-dbus-glib/PKGBUILD

@@ -13,6 +13,9 @@ makedepends=("${MINGW_PACKAGE_PREFIX}-cc" "${MINGW_PACKAGE_PREFIX}-autotools" "$
 options=('strip' 'staticlibs')
 license=("BSD")
 url="https://www.freedesktop.org/wiki/Software/dbus"
+msys2_references=(
+  "cpe: cpe:/a:freedesktop:dbus-glib"
+)
 source=("https://dbus.freedesktop.org/releases/${_realname}/${_realname}-${pkgver}.tar.gz"{,.asc})
 sha256sums=('7d550dccdfcd286e33895501829ed971eeb65c614e73aadb4a08aeef719b143a'
             'SKIP')

mingw-w64-dbus/PKGBUILD

@@ -18,6 +18,10 @@ makedepends=("${MINGW_PACKAGE_PREFIX}-cc"
              "xmlto")
 license=('spdx:AFL-2.1 OR GPL-2.0-or-later')
 url="https://www.freedesktop.org/wiki/Software/dbus"
+msys2_references=(
+  "cpe: cpe:/a:d-bus_project:d-bus"
+  "cpe: cpe:/a:freedesktop:dbus"
+)
 source=("https://dbus.freedesktop.org/releases/dbus/${_realname}-${pkgver}.tar.xz"{,.asc})
 sha256sums=('ba1f21d2bd9d339da2d4aa8780c09df32fea87998b73da24f49ab9df1e36a50f'
             'SKIP')

mingw-w64-dcmtk/PKGBUILD

@@ -10,6 +10,9 @@ arch=('any')
 mingw_arch=('mingw64' 'ucrt64' 'clang64' 'clangarm64')
 url='http://dicom.offis.de/dcmtk'
 msys2_repository_url="https://git.dcmtk.org/?p=dcmtk.git"
+msys2_references=(
+  "cpe: cpe:/a:offis:dcmtk"
+)
 license=('spdx:BSD-3-Clause')
 depends=("${MINGW_PACKAGE_PREFIX}-icu"
          "${MINGW_PACKAGE_PREFIX}-libiconv"

mingw-w64-dcraw/PKGBUILD

@@ -10,6 +10,10 @@ pkgdesc="Decoder for any raw image from any digital camera"
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clangarm64' 'clang32')
 url="https://www.dechifro.org/dcraw/"
+msys2_references=(
+  "cpe: cpe:/a:dave_coffin:dcraw"
+  "cpe: cpe:/a:dcraw_project:dcraw"
+)
 license=("GPLv2")
 options=('strip')
 depends=("${MINGW_PACKAGE_PREFIX}-lcms2"

mingw-w64-dia/PKGBUILD

@@ -10,7 +10,8 @@ arch=('any')
 mingw_arch=('mingw64' 'ucrt64' 'clang64' 'clangarm64')
 url='https://gitlab.gnome.org/GNOME/dia'
 msys2_references=(
-  'cpe: cpe:/a:dia:dia'
+  "cpe: cpe:/a:dia:dia"
+  "cpe: cpe:/a:gnome:dia"
 )
 license=('spdx:GPL-2.0-or-later')
 depends=(

mingw-w64-djvulibre/PKGBUILD

@@ -9,6 +9,9 @@ pkgdesc="Suite to create, manipulate and view DjVu (mingw-w64)"
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="https://djvu.sourceforge.io/"
+msys2_references=(
+  "cpe: cpe:/a:djvulibre_project:djvulibre"
+)
 license=("GPL")
 makedepends=("${MINGW_PACKAGE_PREFIX}-cc"
              "${MINGW_PACKAGE_PREFIX}-pkgconf"

mingw-w64-doxygen/PKGBUILD

@@ -12,6 +12,7 @@ url="https://www.doxygen.nl/"
 msys2_repository_url="https://github.com/doxygen/doxygen"
 msys2_references=(
   'archlinux: doxygen'
+  "cpe: cpe:/a:doxygen:doxygen"
 )
 license=('spdx:GPL-2.0-only')
 depends=("${MINGW_PACKAGE_PREFIX}-gcc-libs"

mingw-w64-duktape/PKGBUILD

@@ -7,6 +7,9 @@ pkgver=2.7.0
 pkgrel=1
 pkgdesc='Embeddable Javascript engine (mingw-w64)'
 url='https://duktape.org/'
+msys2_references=(
+  "cpe: cpe:/a:duktape_project:duktape"
+)
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 license=("MIT")

mingw-w64-emacs/PKGBUILD

@@ -15,6 +15,7 @@ mingw_arch=('mingw64' 'ucrt64' 'clang64' 'clangarm64')
 url="https://www.gnu.org/software/${_realname}/"
 msys2_references=(
   'archlinux: emacs'
+  "cpe: cpe:/a:gnu:emacs"
 )
 license=('spdx:GPL-3.0-or-later')
 depends=("${MINGW_PACKAGE_PREFIX}-ctags"

mingw-w64-eog/PKGBUILD

@@ -10,6 +10,9 @@ arch=('any')
 mingw_arch=('mingw64' 'ucrt64' 'clang64' 'clangarm64')
 url="https://wiki.gnome.org/Apps/EyeOfGnome"
 msys2_repository_url="https://gitlab.gnome.org/GNOME/eog"
+msys2_references=(
+  "cpe: cpe:/a:gnome:eog"
+)
 license=("spdx:GPL-2.0-or-later")
 depends=("${MINGW_PACKAGE_PREFIX}-adwaita-icon-theme"
          "${MINGW_PACKAGE_PREFIX}-gettext"

mingw-w64-evince/PKGBUILD

@@ -10,6 +10,9 @@ mingw_arch=('mingw64' 'ucrt64' 'clang64' 'clangarm64')
 pkgdesc="Document (PostScript, PDF) viewer (mingw-w64)"
 url="https://wiki.gnome.org/Apps/Evince"
 msys2_repository_url="https://gitlab.gnome.org/GNOME/evince"
+msys2_references=(
+  "cpe: cpe:/a:gnome:evince"
+)
 license=("spdx:GPL-2.0-or-later")
 depends=("${MINGW_PACKAGE_PREFIX}-glib2"
          "${MINGW_PACKAGE_PREFIX}-cairo"

mingw-w64-exiv2-0.27/PKGBUILD

@@ -11,6 +11,10 @@ pkgdesc="Exif/IPTC/Xmp C++ metadata library and tools (mingw-w64)"
 arch=('any')
 mingw_arch=('mingw32' 'mingw64')
 url='https://exiv2.org/'
+msys2_references=(
+  "cpe: cpe:/a:andreas_huggel:exiv2"
+  "cpe: cpe:/a:exiv2:exiv2"
+)
 license=('spdx:GPL-2.0-or-later')
 makedepends=("${MINGW_PACKAGE_PREFIX}-cc"
              "${MINGW_PACKAGE_PREFIX}-cmake"

mingw-w64-exiv2/PKGBUILD

@@ -14,7 +14,8 @@ url='https://exiv2.org/'
 msys2_repository_url="https://github.com/Exiv2/exiv2"
 msys2_references=(
   'archlinux: exiv2'
-  'cpe: cpe:/a:exiv2:exiv2'
+  "cpe: cpe:/a:andreas_huggel:exiv2"
+  "cpe: cpe:/a:exiv2:exiv2"
 )
 license=('spdx:GPL-2.0-or-later')
 makedepends=("${MINGW_PACKAGE_PREFIX}-cc"

mingw-w64-expat/PKGBUILD

@@ -11,6 +11,9 @@ arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="https://libexpat.github.io/"
 msys2_repository_url="https://github.com/libexpat/libexpat"
+msys2_references=(
+  "cpe: cpe:/a:libexpat_project:libexpat"
+)
 license=('spdx:MIT')
 makedepends=("${MINGW_PACKAGE_PREFIX}-cc" "${MINGW_PACKAGE_PREFIX}-autotools")
 options=('strip' 'staticlibs')

mingw-w64-faad2/PKGBUILD

@@ -9,6 +9,10 @@ pkgdesc="ISO AAC audio decoder (mingw-w64)"
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="https://github.com/knik0/faad2"
+msys2_references=(
+  "cpe: cpe:/a:audiocoding:faad2"
+  "cpe: cpe:/a:faad2_project:faad2"
+)
 license=('spdx:GPL-2.0-or-later')
 depends=("${MINGW_PACKAGE_PREFIX}-gcc-libs")
 makedepends=("${MINGW_PACKAGE_PREFIX}-cc"

mingw-w64-ffmpeg/PKGBUILD

@@ -13,6 +13,9 @@ arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="https://ffmpeg.org/"
 msys2_repository_url='https://git.ffmpeg.org/ffmpeg.git'
+msys2_references=(
+  "cpe: cpe:/a:ffmpeg:ffmpeg"
+)
 license=('spdx:GPL-3.0-or-later')
 depends=("${MINGW_PACKAGE_PREFIX}-aom"
          "${MINGW_PACKAGE_PREFIX}-bzip2"

mingw-w64-ffmpeg4.4/PKGBUILD

@@ -12,6 +12,9 @@ pkgdesc="Complete solution to record, convert and stream audio and video (mingw-
 arch=('any')
 mingw_arch=('mingw64' 'ucrt64' 'clang64' 'clangarm64')
 url="https://ffmpeg.org/"
+msys2_references=(
+  "cpe: cpe:/a:ffmpeg:ffmpeg"
+)
 license=('spdx:GPL-3.0-or-later')
 depends=("${MINGW_PACKAGE_PREFIX}-aom"
          "${MINGW_PACKAGE_PREFIX}-bzip2"

mingw-w64-file/PKGBUILD

@@ -9,6 +9,9 @@ pkgdesc='Determine the type of a file from its contents (mingw-w64)'
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url='https://www.darwinsys.com/file/'
+msys2_references=(
+  "cpe: cpe:/a:file_project:file"
+)
 license=('BSD')
 depends=(${MINGW_PACKAGE_PREFIX}-bzip2
          ${MINGW_PACKAGE_PREFIX}-libsystre

mingw-w64-filezilla/PKGBUILD

@@ -14,6 +14,8 @@ msys2_repository_url="https://svn.filezilla-project.org/filezilla/FileZilla3/"
 msys2_documentation_url="https://wiki.filezilla-project.org/Documentation"
 msys2_references=(
   'archlinux: filezilla'
+  "cpe: cpe:/a:filezilla:filezilla"
+  "cpe: cpe:/a:filezilla-project:filezilla_client"
 )
 license=('spdx:GPL-2.0-or-later')
 depends=("${MINGW_PACKAGE_PREFIX}-gcc-libs"

mingw-w64-firebird/PKGBUILD

@@ -13,6 +13,7 @@ arch=('any')
 mingw_arch=('mingw64' 'ucrt64' 'clang64')
 msys2_references=(
   'archlinux: firebird'
+  "cpe: cpe:/a:firebirdsql:firebird"
 )
 msys2_repository_url='https://github.com/FirebirdSQL/firebird/'
 msys2_documentation_url='https://www.firebirdsql.org/en/documentation/'

mingw-w64-flac/PKGBUILD

@@ -9,6 +9,9 @@ pkgdesc="Free Lossless Audio Codec (mingw-w64)"
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="https://xiph.org/flac/"
+msys2_references=(
+  "cpe: cpe:/a:flac_project:flac"
+)
 license=('custom:Xiph' 'LGPL' 'GPL' 'FDL')
 depends=("${MINGW_PACKAGE_PREFIX}-libogg"
          "${MINGW_PACKAGE_PREFIX}-gettext-runtime"

mingw-w64-flang/PKGBUILD

@@ -14,6 +14,9 @@ pkgdesc="Fortran frontend for LLVM (mingw-w64)"
 arch=('any')
 mingw_arch=('mingw64' 'ucrt64' 'clang64' 'clangarm64')
 url="https://flang.llvm.org/"
+msys2_references=(
+  "cpe: cpe:/a:llvm:llvm"
+)
 license=("spdx:Apache-2.0 WITH LLVM-exception")
 provides=($([[ ${MINGW_PACKAGE_PREFIX} != *-clang-* ]] || echo "${MINGW_PACKAGE_PREFIX}-fc"))
 depends=("${MINGW_PACKAGE_PREFIX}-clang"

mingw-w64-flif/PKGBUILD

@@ -10,6 +10,10 @@ pkgdesc="Free Lossless Image Format (mingw-w64)"
 arch=(any)
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="https://github.com/FLIF-hub/FLIF"
+msys2_references=(
+  "cpe: cpe:/a:flif:flif"
+  "cpe: cpe:/a:flif:free_lossless_image_format"
+)
 license=('GPL3')
 conflicts=("${MINGW_PACKAGE_PREFIX}-flif-git")
 depends=("${MINGW_PACKAGE_PREFIX}-zlib"

mingw-w64-fluidsynth/PKGBUILD

@@ -9,6 +9,9 @@ pkgdesc="A real-time software synthesizer based on the SoundFont 2 specification
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="https://www.fluidsynth.org/"
+msys2_references=(
+  "cpe: cpe:/a:fluidsynth:fluidsynth"
+)
 license=('spdx:LGPL-2.1-or-later')
 depends=("${MINGW_PACKAGE_PREFIX}-gcc-libs"
          "${MINGW_PACKAGE_PREFIX}-glib2"

mingw-w64-fmt/PKGBUILD

@@ -14,6 +14,7 @@ url="https://fmt.dev"
 msys2_repository_url="https://github.com/fmtlib/fmt"
 msys2_references=(
   'archlinux: fmt'
+  "cpe: cpe:/a:fmt:fmt"
 )
 license=('spdx:MIT')
 depends=("${MINGW_PACKAGE_PREFIX}-gcc-libs")

mingw-w64-fontconfig/PKGBUILD

@@ -11,6 +11,9 @@ arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="https://wiki.freedesktop.org/www/Software/fontconfig/"
 msys2_repository_url="https://gitlab.freedesktop.org/fontconfig/fontconfig"
+msys2_references=(
+  "cpe: cpe:/a:fontconfig_project:fontconfig"
+)
 license=("custom")
 makedepends=("${MINGW_PACKAGE_PREFIX}-cc"
              "${MINGW_PACKAGE_PREFIX}-meson"

mingw-w64-fontforge/PKGBUILD

@@ -10,6 +10,10 @@ arch=('any')
 mingw_arch=('mingw64' 'ucrt64' 'clang64' 'clangarm64')
 url='https://fontforge.org/'
 msys2_repository_url="https://github.com/fontforge/fontforge"
+msys2_references=(
+  "cpe: cpe:/a:alexej_kryukov:fontforge"
+  "cpe: cpe:/a:fontforge:fontforge"
+)
 license=('spdx:GPL-3.0-or-later')
 depends=("${MINGW_PACKAGE_PREFIX}-freetype"
          "${MINGW_PACKAGE_PREFIX}-gettext"

mingw-w64-fossil/PKGBUILD

@@ -13,6 +13,10 @@ pkgdesc='Simple, high-reliability, distributed software configuration management
 arch=('any')
 mingw_arch=('mingw64' 'ucrt64' 'clang64' 'clangarm64')
 url='https://www.fossil-scm.org/'
+msys2_references=(
+  "cpe: cpe:/a:fossil-scm:fossil"
+  "cpe: cpe:/a:fossil_scm:fossil"
+)
 license=('BSD')
 depends=("${MINGW_PACKAGE_PREFIX}-openssl"
          "${MINGW_PACKAGE_PREFIX}-readline"

mingw-w64-freeimage/PKGBUILD

@@ -14,6 +14,9 @@ arch=('any')
 mingw_arch=('mingw64' 'ucrt64' 'clang64' 'clangarm64')
 license=('spdx:FreeImage OR GPL-2.0-or-later')
 url="https://freeimage.sourceforge.io/"
+msys2_references=(
+  "cpe: cpe:/a:freeimage_project:freeimage"
+)
 depends=("${MINGW_PACKAGE_PREFIX}-gcc-libs"
          "${MINGW_PACKAGE_PREFIX}-jxrlib"
          "${MINGW_PACKAGE_PREFIX}-libjpeg-turbo"

mingw-w64-freerdp/PKGBUILD

@@ -12,6 +12,7 @@ url="https://www.freerdp.com/"
 msys2_repository_url="https://github.com/FreeRDP/FreeRDP"
 msys2_references=(
   'archlinux: freerdp'
+  "cpe: cpe:/a:freerdp:freerdp"
 )
 license=('spdx:Apache-2.0')
 depends=("${MINGW_PACKAGE_PREFIX}-cairo"

mingw-w64-freetds/PKGBUILD

@@ -16,6 +16,7 @@ msys2_documentation_url='https://www.freetds.org/docs.html'
 msys2_issue_tracker_url='https://github.com/FreeTDS/freetds/issues/'
 msys2_references=(
   'archlinux: freetds'
+  "cpe: cpe:/a:freetds:freetds"
 )
 license=('spdx:LGPL-2.0-or-later')
 depends=("${MINGW_PACKAGE_PREFIX}-gcc-libs"

mingw-w64-freetype/PKGBUILD

@@ -13,6 +13,7 @@ arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 msys2_references=(
   'archlinux: freetype2'
+  "cpe: cpe:/a:freetype:freetype"
 )
 url="https://www.freetype.org/"
 license=('spdx:GPL-2.0-or-later OR FTL')

mingw-w64-fribidi/PKGBUILD

@@ -10,6 +10,9 @@ arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 license=('LGPL')
 url="https://github.com/fribidi/fribidi/"
+msys2_references=(
+  "cpe: cpe:/a:gnu:fribidi"
+)
 depends=()
 options=('strip' '!libtool' 'staticlibs')
 makedepends=("${MINGW_PACKAGE_PREFIX}-meson"

mingw-w64-gc/PKGBUILD

@@ -9,6 +9,10 @@ pkgdesc="A garbage collector for C and C++ (mingw-w64)"
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="https://www.hboehm.info/gc"
+msys2_references=(
+  "cpe: cpe:/a:bdwgc_project:bdwgc"
+  "cpe: cpe:/a:boehm-demers-weiser:garbage_collector"
+)
 license=("MIT")
 depends=("${MINGW_PACKAGE_PREFIX}-gcc-libs"
          "${MINGW_PACKAGE_PREFIX}-libwinpthread-git"

mingw-w64-gcab/PKGBUILD

@@ -9,6 +9,9 @@ pkgdesc="A GObject library to create cabinet files (mingw-w64)"
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clangarm64' 'clang32')
 url='https://wiki.gnome.org/msitools'
+msys2_references=(
+  "cpe: cpe:/a:gnome:gcab"
+)
 license=('LGPL')
 depends=("${MINGW_PACKAGE_PREFIX}-glib2"
          "${MINGW_PACKAGE_PREFIX}-gettext-runtime"

mingw-w64-gcc/PKGBUILD

@@ -35,6 +35,9 @@ pkgdesc="GCC for the MinGW-w64"
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64')
 url="https://gcc.gnu.org"
+msys2_references=(
+  "cpe: cpe:/a:gnu:gcc"
+)
 license=('spdx:GPL-3.0-or-later')
 makedepends=("${MINGW_PACKAGE_PREFIX}-${_realname}"
              $([[ "$_enable_ada" == "yes" ]] && echo "${MINGW_PACKAGE_PREFIX}-${_realname}-ada")

mingw-w64-gdal/PKGBUILD

@@ -17,6 +17,8 @@ url="https://gdal.org/"
 msys2_repository_url="https://github.com/OSGeo/gdal"
 msys2_references=(
   'archlinux: gdal'
+  "cpe: cpe:/a:gdal:gdal"
+  "cpe: cpe:/a:osgeo:gdal"
 )
 license=('spdx:MIT')
 makedepends=("${MINGW_PACKAGE_PREFIX}-cc"

mingw-w64-gdb/PKGBUILD

@@ -11,6 +11,9 @@ pkgdesc="GNU Debugger (mingw-w64)"
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32')
 url="https://www.gnu.org/software/gdb/"
+msys2_references=(
+  "cpe: cpe:/a:gnu:gdb"
+)
 license=('spdx:GPL-3.0-or-later')
 groups=($( [[ ${MINGW_PACKAGE_PREFIX} == *-clang-* ]] || echo "${MINGW_PACKAGE_PREFIX}-toolchain" ))
 depends=("${MINGW_PACKAGE_PREFIX}-gcc-libs"

mingw-w64-gdk-pixbuf2/PKGBUILD

@@ -12,6 +12,10 @@ pkgdesc="An image loading library (mingw-w64)"
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="https://gitlab.gnome.org/GNOME/gdk-pixbuf"
+msys2_references=(
+  "cpe: cpe:/a:gnome:gdk-pixbuf"
+  "cpe: cpe:/a:gnome:gdkpixbuf"
+)
 license=('spdx:LGPL-2.1-or-later')
 makedepends=("${MINGW_PACKAGE_PREFIX}-cc"
              "${MINGW_PACKAGE_PREFIX}-pkgconf"

mingw-w64-gedit/PKGBUILD

@@ -9,6 +9,9 @@ pkgdesc="A text editor for GNOME (mingw-w64)"
 arch=('any')
 mingw_arch=('mingw64' 'ucrt64' 'clang64' 'clangarm64')
 url="https://gedit-technology.github.io/apps/gedit/"
+msys2_references=(
+  "cpe: cpe:/a:gnome:gedit"
+)
 license=('spdx:GPL-2.0-or-later')
 depends=("${MINGW_PACKAGE_PREFIX}-adwaita-icon-theme"
          "${MINGW_PACKAGE_PREFIX}-libgedit-amtk"

mingw-w64-gegl/PKGBUILD

@@ -14,6 +14,7 @@ url="https://gegl.org/"
 msys2_repository_url="https://gitlab.gnome.org/GNOME/gegl"
 msys2_references=(
   'archlinux: gegl'
+  "cpe: cpe:/a:gegl:gegl"
 )
 license=('spdx:GPL-3.0-or-later AND LGPL-3.0-or-later')
 makedepends=("${MINGW_PACKAGE_PREFIX}-cc"

mingw-w64-gettext/PKGBUILD

@@ -10,6 +10,9 @@ pkgdesc="GNU internationalization library (mingw-w64)"
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="https://www.gnu.org/software/gettext/"
+msys2_references=(
+  "cpe: cpe:/a:gnu:gettext"
+)
 # GPL3 for the package as a whole and LGPL for some parts, see the license files
 license=('spdx:GPL-3.0-or-later AND LGPL-2.1-or-later')
 makedepends=("${MINGW_PACKAGE_PREFIX}-cc"

mingw-w64-ghostscript/PKGBUILD

@@ -9,6 +9,8 @@ arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 msys2_references=(
   'archlinux: ghostscript'
+  "cpe: cpe:/a:artifex:ghostscript"
+  "cpe: cpe:/a:artifex:gpl_ghostscript"
 )
 msys2_documentation_url="https://ghostscript.readthedocs.io/"
 msys2_repository_url="https://git.ghostscript.com/?p=ghostpdl.git"

mingw-w64-giflib/PKGBUILD

@@ -9,6 +9,9 @@ pkgdesc="A library for reading and writing gif images (mingw-w64)"
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="https://sourceforge.net/projects/giflib"
+msys2_references=(
+  "cpe: cpe:/a:giflib_project:giflib"
+)
 license=("MIT")
 makedepends=(
   "${MINGW_PACKAGE_PREFIX}-cc"

mingw-w64-gimp3/PKGBUILD

@@ -12,6 +12,7 @@ url="https://www.gimp.org/downloads/devel/"
 msys2_repository_url="https://gitlab.gnome.org/GNOME/gimp"
 msys2_references=(
   'aur: gimp-devel'
+  "cpe: cpe:/a:gimp:gimp"
 )
 license=('spdx:GPL-3.0-or-later AND LGPL-3.0-or-later')
 depends=("${MINGW_PACKAGE_PREFIX}-aalib"

mingw-w64-git-lfs/PKGBUILD

@@ -10,6 +10,9 @@ arch=(any)
 mingw_arch=('mingw64' 'ucrt64' 'clang64' 'clangarm64')
 pkgdesc="An open source Git extension for versioning large files (mingw-w64)"
 url="https://git-lfs.github.com/"
+msys2_references=(
+  "cpe: cpe:/a:git_large_file_storage_project:git_large_file_storage"
+)
 license=('spdx:MIT')
 depends=("git")
 makedepends=("unzip"

mingw-w64-glib-networking/PKGBUILD

@@ -9,6 +9,9 @@ pkgdesc="Network-related GIO modules for glib (mingw-w64)"
 arch=(any)
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="https://gitlab.gnome.org/GNOME/glib-networking"
+msys2_references=(
+  "cpe: cpe:/a:gnome:glib-networking"
+)
 license=('spdx:LGPL-2.1-or-later')
 makedepends=("${MINGW_PACKAGE_PREFIX}-cc"
              "${MINGW_PACKAGE_PREFIX}-meson"

mingw-w64-glib2/PKGBUILD

@@ -9,6 +9,9 @@ pkgname="${MINGW_PACKAGE_PREFIX}-${_realname}"
 pkgver=2.80.0
 pkgrel=1
 url="https://gitlab.gnome.org/GNOME/glib"
+msys2_references=(
+  "cpe: cpe:/a:gnome:glib"
+)
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 pkgdesc="Common C routines used by GTK+ 3 and other libs (mingw-w64)"

mingw-w64-gmime/PKGBUILD

@@ -9,6 +9,7 @@ arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clangarm64' 'clang32')
 msys2_references=(
   'archlinux: gmime3'
+  "cpe: cpe:/a:gnome:gmime"
 )
 pkgdesc="Glorious MIME Utility Library (mingw-w64)"
 url="https://www.gnome.org"

mingw-w64-gmp/PKGBUILD

@@ -9,6 +9,9 @@ pkgdesc="A free library for arbitrary precision arithmetic (mingw-w64)"
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="https://gmplib.org/"
+msys2_references=(
+  "cpe: cpe:/a:gmplib:gmp"
+)
 license=('LGPL3' 'GPL')
 makedepends=("${MINGW_PACKAGE_PREFIX}-autotools" "${MINGW_PACKAGE_PREFIX}-cc")
 source=(https://ftp.gnu.org/gnu/gmp/${_realname}-${pkgver}.tar.xz{,.sig}

mingw-w64-gnucobol/PKGBUILD

@@ -14,6 +14,9 @@ replaces=("${MINGW_PACKAGE_PREFIX}-${_realname}-svn" "${MINGW_PACKAGE_PREFIX}-gn
 arch=('any')
 mingw_arch=('mingw64' 'ucrt64' 'clang64')
 url="https://www.gnu.org/software/gnucobol/"
+msys2_references=(
+  "cpe: cpe:/a:gnucobol_project:gnucobol"
+)
 license=('spdx:GPL-3.0-or-later AND spdx:LGPL-3.0-only')
 # note: the final binaries will call cc, therefore it is a dependency
 depends=("${MINGW_PACKAGE_PREFIX}-cc"

mingw-w64-gnuplot/PKGBUILD

@@ -14,6 +14,8 @@ arch=('any')
 mingw_arch=('mingw64' 'mingw32' 'ucrt64' 'clang64' 'clangarm64') 
 msys2_references=(
   'archlinux: gnuplot'
+  "cpe: cpe:/a:gnuplot:gnuplot"
+  "cpe: cpe:/a:gnuplot_project:gnuplot"
 )
 msys2_repository_url='https://sourceforge.net/p/gnuplot/gnuplot-main/ci/master/tree/'
 msys2_documentation_url='http://www.gnuplot.info/documentation.html'

mingw-w64-gnutls/PKGBUILD

@@ -11,6 +11,9 @@ mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 license=('spdx:GPL-3.0-or-later' 'spdx:LGPL-2.1-or-later')
 url="https://www.gnutls.org/"
 msys2_repository_url="https://gitlab.com/gnutls/gnutls"
+msys2_references=(
+  "cpe: cpe:/a:gnu:gnutls"
+)
 options=('!zipman')
 depends=("${MINGW_PACKAGE_PREFIX}-gcc-libs"
          "${MINGW_PACKAGE_PREFIX}-gettext-runtime"

mingw-w64-go/PKGBUILD

@@ -11,6 +11,7 @@ arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 msys2_references=(
   'archlinux: go'
+  "cpe: cpe:/a:golang:go"
 )
 license=('spdx:BSD-3-Clause')
 msys2_repository_url='https://github.com/golang/go/'

mingw-w64-godot/PKGBUILD

@@ -9,6 +9,10 @@ pkgdesc='An advanced, feature packed, multi-platform 2D and 3D game engine (ming
 arch=('any')
 mingw_arch=('mingw64' 'ucrt64' 'clang64')
 url="https://www.godotengine.org/"
+msys2_references=(
+  "cpe: cpe:/a:godotengine:godot"
+  "cpe: cpe:/a:godotengine:godot_engine"
+)
 license=('spdx:MIT')
 depends=("${MINGW_PACKAGE_PREFIX}-brotli"
          "${MINGW_PACKAGE_PREFIX}-bullet"

mingw-w64-gpgme/PKGBUILD

@@ -18,6 +18,7 @@ url="https://gnupg.org/related_software/gpgme/"
 msys2_repository_url="https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gpgme.git"
 msys2_references=(
   'archlinux: gpgme'
+  "cpe: cpe:/a:gnu:gpgme"
 )
 license=('spdx: LGPL-2.1-or-later OR GPL-2.0-or-later')
 depends=("${MINGW_PACKAGE_PREFIX}-glib2"

mingw-w64-graphicsmagick/PKGBUILD

@@ -10,7 +10,8 @@ arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url="http://www.graphicsmagick.org/"
 msys2_references=(
-  'cpe: cpe:/a:graphicsmagick:graphicsmagick'
+  "cpe: cpe:/a:graphicsmagick:graphicsmagick"
+  "cpe: cpe:/a:imagemagick:graphicsmagick"
 )
 license=("spdx:MIT")
 makedepends=("${MINGW_PACKAGE_PREFIX}-ghostscript"

mingw-w64-graphite2/PKGBUILD

@@ -10,6 +10,7 @@ arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 msys2_references=(
   'archlinux: graphite'
+  "cpe: cpe:/a:sil:graphite2"
 )
 url="https://github.com/silnrsi/graphite"
 license=('spdx:LGPL-2.1-or-later')

mingw-w64-grep/PKGBUILD

@@ -10,6 +10,9 @@ pkgdesc="Grep searches one or more input files for lines containing a match to a
 arch=('any')
 mingw_arch=('mingw32' 'mingw64' 'ucrt64' 'clang64' 'clang32' 'clangarm64')
 url='https://www.gnu.org/software/grep/'
+msys2_references=(
+  "cpe: cpe:/a:gnu:grep"
+)
 license=('GPL3')
 depends=("${MINGW_PACKAGE_PREFIX}-gettext"
          "${MINGW_PACKAGE_PREFIX}-pcre2")