CPE, PURL, versioning discussions for vulnerability-lookup

[adulau]

Following some discussions, notes about versioning in vulnerability-lookup:

• [ ] Improve the UI output with the version is available next to the product name.
• [ ] Improve the CPE api to search for product/vendor to be originally compatible with the original cve-search API.
• [ ] Add cpe-guesser directly in vulnerability-lookup.
• [ ] Add ability to extend or alias CPE name such as new vendor names or product names.
• [ ] Review the additional CPE from other users (like JPN).
• [ ] Support of purl export if a package name is known.

Ref: https://github.com/package-url/purl-spec/issues/331