)]}'
{
  "commit": "0c14bdcec9bcf46d51127cc1948bd1c10271f006",
  "tree": "4c4e2ce613f6ebd60737bc417a5cb69f10288c6f",
  "parents": [
    "a93f962783ed4fb0ed3f220f391042679eb17742"
  ],
  "author": {
    "name": "Lei Zhang",
    "email": "thestig@chromium.org",
    "time": "Fri Aug 28 01:27:20 2020 +0000"
  },
  "committer": {
    "name": "Chromium commit bot",
    "email": "commit-bot@chromium.org",
    "time": "Fri Aug 28 01:27:20 2020 +0000"
  },
  "message": "Add CPEs for libpng and freetype.\n\nCPEs are the way that MITRE tracks different projects and versions, and\nthat\u0027s the input required by Vomit, Google\u0027s automated vulnerability\nnotification system. At present Vomit is unable to identify the versions\nfor these components and is therefore reporting the wrong CVEs in crbugs.\n\nAdding these CPEPrefix lines will enable Vomit to notify for any\nvulnerabilities affecting these versions.\n\nThis is copied from https://crrev.com/746237 and other related CLs.\n\nChange-Id: I0f04446763510ca4cc85746adb410ae9f3f4e135\nReviewed-on: https://pdfium-review.googlesource.com/c/pdfium/+/73191\nReviewed-by: Tom Sepez \u003ctsepez@chromium.org\u003e\nCommit-Queue: Lei Zhang \u003cthestig@chromium.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "461c194116db71c6f1d7e49e839178edaa6ceb93",
      "old_mode": 33188,
      "old_path": "third_party/freetype/README.pdfium",
      "new_id": "1a26701d387ae6dd8a189ed1dbcdb46592ddd69f",
      "new_mode": 33188,
      "new_path": "third_party/freetype/README.pdfium"
    },
    {
      "type": "modify",
      "old_id": "0d9c30ce0455d86953bc020ee0872de3a8f17665",
      "old_mode": 33188,
      "old_path": "third_party/libpng16/README.pdfium",
      "new_id": "a4bcb63ec91bf8d60777bdcf8d48f68d8caab830",
      "new_mode": 33188,
      "new_path": "third_party/libpng16/README.pdfium"
    }
  ]
}