This is a mapping of CPEs to package urls created by using VulnerableCode's data - View it on GitHub