Package Metadata A place to collect information about packages across various ecosystems. The initial focus is on mapping to the associated CPE components in order to more accurately match CVEs from the National Vulnerability Database