dose cpe package should provide a function to escape a product name to cpe standard

[beruhan]

I think cpe package should give a function to convert a normal name to cpe standard name,auto handle escape.