package/pugixml: add _CPE_ID_VENDOR

cpe:2.3:a:pugixml_project:pugixml:* is a valid CPE identifier for this package:

 https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe:2.3:a:pugixml_project:pugixml

Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
[yann.morin.1998@free.fr: move up, right after license]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>

diff --git a/package/pugixml/pugixml.mk b/package/pugixml/pugixml.mk
index 5d7fc630175498f4fd45087826eb2949f58aeb50..ddda5a3ccc25a20c9c1c127144fde4fcf9c1c69b 100644 (file)
--- a/package/pugixml/pugixml.mk
+++ b/package/pugixml/pugixml.mk
@@ -8,6 +8,8 @@ PUGIXML_VERSION = 1.11.4
 PUGIXML_SITE = http://github.com/zeux/pugixml/releases/download/v$(PUGIXML_VERSION)
 PUGIXML_LICENSE = MIT
 PUGIXML_LICENSE_FILES = LICENSE.md
+PUGIXML_CPE_ID_VENDOR = pugixml_project
+
 PUGIXML_INSTALL_STAGING = YES
 
 # Pugixml will automatically enable 'long long' support on C++11 compilers,