diff --git a/databases/arrow/Makefile b/databases/arrow/Makefile
index 7c5e8290d65f..a126502eabda 100644
--- a/databases/arrow/Makefile
+++ b/databases/arrow/Makefile
@@ -1,240 +1,242 @@
 PORTNAME=	arrow
 PORTVERSION=	24.0.0
 CATEGORIES=	databases
 MASTER_SITES=	APACHE/${PORTNAME}/${PORTNAME}-${DISTVERSION} \
 		https://github.com/apache/orc/archive/rel/:orc
 DISTNAME=	apache-${PORTNAME}-${DISTVERSION}
 DISTFILES=	apache-${PORTNAME}-${DISTVERSION}${EXTRACT_SUFX} release-1.6.6${EXTRACT_SUFX}:orc
 EXTRACT_ONLY=	apache-${PORTNAME}-${DISTVERSION}${EXTRACT_SUFX}
 
 MAINTAINER=	yuri@FreeBSD.org
 COMMENT=	Columnar in-memory analytics layer for big data
 WWW=		https://arrow.apache.org \
 		https://github.com/apache/arrow
 
 LICENSE=	APACHE20
 LICENSE_FILE=	${WRKSRC}/../LICENSE.txt
 
 LIB_DEPENDS=	libboost_thread.so:devel/boost-libs
 
-USES=		cmake compiler:c++20-lang localbase pkgconfig python:build,test
+USES=		cmake compiler:c++20-lang cpe localbase pkgconfig python:build,test
 USE_LDCONFIG=	yes
 
 USE_GITHUB=	nodefault
 GH_ACCOUNT=	apache
 #GH_TUPLE=	apache:arrow-testing:d2a1371:arrow_testing/testing \
 		apache:parquet-testing:c7cf137:parquet_testing/cpp/submodules/parquet-testing
 
 WRKSRC_SUBDIR=	cpp
 
 PLIST_SUB=	LIBVERSION=${DISTVERSION:R:R}00
 
 CMAKE_ARGS=	-DARROW_RUNTIME_SIMD_LEVEL=NONE -DARROW_SIMD_LEVEL=NONE -DCMAKE_CXX_STANDARD=20
 CMAKE_OFF=	ARROW_BUILD_BENCHMARKS ARROW_BUILD_STATIC ARROW_BUILD_TESTS ARROW_WITH_BACKTRACE
 
 BINARY_ALIAS=	python=${PYTHON_CMD} # only for tests
 
 OPTIONS_GROUP=			COMPONENTS COMPRESSION # components are listed in cpp/cmake_modules/DefineOptions.cmake
 OPTIONS_GROUP_COMPONENTS=	ACERO COMPUTE CSV DATASET FILESYSTEM FLIGHT FLIGHT_SQL GANDIVA HDFS IPC JSON MIMALLOC PARQUET ORC S3 SKYHOOK SUBSTRAIT BUILD_UTILITIES TENSORFLOW TESTING
 OPTIONS_GROUP_COMPRESSION=	BROTLI BZ2 LZ4 SNAPPY ZLIB ZSTD
 OPTIONS_SUB=			yes
 
 ## DESCs
 
 COMPRESSION_DESC=		Compression support:
 COMPONENTS_DESC=		Build components:
 
 ## Compression options
 
 BROTLI_CMAKE_BOOL=		ARROW_WITH_BROTLI
 BROTLI_LIB_DEPENDS=		libbrotlicommon.so:archivers/brotli
 
 BZ2_DESC=			bz2 compression support
 BZ2_CMAKE_BOOL=			ARROW_WITH_BZ2
 
 LZ4_CMAKE_BOOL=			ARROW_WITH_LZ4
 LZ4_LIB_DEPENDS=		liblz4.so:archivers/liblz4
 
 SNAPPY_CMAKE_BOOL=		ARROW_WITH_SNAPPY
 SNAPPY_LIB_DEPENDS=		libsnappy.so:archivers/snappy
 
 ZLIB_CMAKE_BOOL=		ARROW_WITH_ZLIB
 
 ZSTD_DESC=			zstd compression support
 ZSTD_CMAKE_BOOL=		ARROW_WITH_ZSTD
 ZSTD_LIB_DEPENDS=		libzstd.so:archivers/zstd
 
 ## Component options
 
 ACERO_DESC=			Arrow Acero Engine Module
 ACERO_CMAKE_BOOL=		ARROW_ACERO
 ACERO_IMPLIES=			COMPUTE IPC
 
 COMPUTE_DESC=			Arrow Compute Modules
 COMPUTE_CMAKE_BOOL=		ARROW_COMPUTE
 COMPUTE_CMAKE_ON=		-DARROW_WITH_UTF8PROC=ON
 COMPUTE_LIB_DEPENDS=		libre2.so:devel/re2 \
 				libutf8proc.so:textproc/utf8proc
 
 CSV_DESC=			Arrow CSV Parser Module
 CSV_CMAKE_BOOL=			ARROW_CSV
 
 DATASET_DESC=			Arrow Dataset Modules
 DATASET_CMAKE_BOOL=		ARROW_DATASET
 DATASET_IMPLIES=		ACERO FILESYSTEM
 
 FILESYSTEM_DESC=		Arrow Filesystem Layer
 FILESYSTEM_CMAKE_BOOL=		ARROW_FILESYSTEM
 
 FLIGHT_DESC=			Arrow Flight RPC System
 FLIGHT_USES=			ssl
 FLIGHT_CMAKE_BOOL=		ARROW_FLIGHT
 FLIGHT_LIB_DEPENDS=		libgflags.so:devel/gflags \
 				libprotobuf.so:devel/protobuf \
 				libabsl_base.so:devel/abseil \
 				libcares.so:dns/c-ares \
 				libgrpc.so:devel/grpc \
 				libre2.so:devel/re2
 FLIGHT_IMPLIES=			IPC COMPUTE # see https://github.com/apache/arrow/issues/40766
 
 FLIGHT_SQL_DESC=		Arrow Flight SQL
 FLIGHT_SQL_CMAKE_BOOL=		ARROW_FLIGHT_SQL
 FLIGHT_SQL_IMPLIES=		FLIGHT
 
 GANDIVA_DESC=			Gandiva libraries
 GANDIVA_USES=			llvm:lib ssl
 GANDIVA_CMAKE_BOOL=		ARROW_GANDIVA
 GANDIVA_CMAKE_ON=		-DARROW_WITH_UTF8PROC=ON
 GANDIVA_LIB_DEPENDS=		libgrpc.so:devel/grpc \
 				libprotobuf.so:devel/protobuf \
 				libre2.so:devel/re2 \
 				libutf8proc.so:textproc/utf8proc
 
 HDFS_DESC=			Arrow HDFS bridge
 HDFS_CMAKE_BOOL=		ARROW_HDFS
 
 IPC_DESC=			Arrow IPC extensions
 IPC_CMAKE_BOOL=			ARROW_IPC
 
 JSON_DESC=			JSON support
 JSON_CMAKE_BOOL=		ARROW_JSON
 JSON_BUILD_DEPENDS=		${LOCALBASE}/include/rapidjson/rapidjson.h:devel/rapidjson
 
 MIMALLOC_DESC=			Arrow mimalloc-based allocato
 MIMALLOC_CMAKE_BOOL=		ARROW_MIMALLOC
 MIMALLOC_LIB_DEPENDS=		libmimalloc.so:devel/mimalloc
 MIMALLOC_BROKEN=		Pending paths fix in bug#255537
 
 PARQUET_DESC=			Parquet libraries
 PARQUET_CMAKE_BOOL=		ARROW_PARQUET PARQUET_REQUIRE_ENCRYPTION
 PARQUET_USES=			ssl
 PARQUET_LIB_DEPENDS=		libthrift.so:devel/thrift-cpp
 PARQUET_IMPLIES=		IPC
 
 ORC_DESC=			Arrow ORC adapter
 ORC_CMAKE_BOOL=			ARROW_ORC
 ORC_LIB_DEPENDS=		libprotobuf.so:devel/protobuf
 ORC_CONFIGURE_ENV=		ARROW_ORC_URL=file://${DISTDIR}/${DIST_SUBDIR}/release-1.6.6${EXTRACT_SUFX}
 ORC_IMPLIES=			LZ4 SNAPPY ZLIB ZSTD # cpp/CMakeLists.txt
 ORC_BROKEN=			fatal error: 'orc/OrcFile.hh' file not found: https://issues.apache.org/jira/browse/ARROW-12624
 
 BUILD_UTILITIES_DESC=		build Arrow commandline utilities
 BUILD_UTILITIES_CMAKE_BOOL=	ARROW_BUILD_UTILITIES
 
 #PYTHON_DESC=			Build python extension support
 #PYTHON_CMAKE_BOOL=		ARROW_PYTHON
 #PYTHON_USES=			python
 #PYTHON_BUILD_DEPENDS=		${PYTHON_PKGNAMEPREFIX}numpy>=1.16,1:math/py-numpy@${PY_FLAVOR} # see https://issues.apache.org/jira/browse/ARROW-16820
 #PYTHON_RUN_DEPENDS=		${PYTHON_PKGNAMEPREFIX}numpy>=1.16,1:math/py-numpy@${PY_FLAVOR}
 #PYTHON_IMPLIES=			COMPUTE CSV DATASET FILESYSTEM HDFS JSON
 #PYTHON_VARS=			PLIST_SUB+=PYTHON_SUFFIX=${PYTHON_SUFFIX}
 
 S3_DESC=			S3 support
 S3_CMAKE_BOOL=			ARROW_S3
 S3_USES=			ssl
 S3_LIB_DEPENDS=			\
 				libaws-c-auth.so:security/aws-c-auth \
 				libaws-c-cal.so:security/aws-c-cal \
 				libaws-c-common.so:devel/aws-c-common \
 				libaws-c-compression.so:devel/aws-c-compression \
 				libaws-c-event-stream.so:devel/aws-c-event-stream \
 				libaws-c-http.so:devel/aws-c-http \
 				libaws-c-io.so:devel/aws-c-io \
 				libaws-c-mqtt.so:devel/aws-c-mqtt \
 				libaws-c-s3.so:devel/aws-c-s3 \
 				libaws-c-sdkutils.so:devel/aws-c-sdkutils \
 				libaws-checksums.so:devel/aws-checksums \
 				libaws-crt-cpp.so:devel/aws-crt-cpp \
 				libaws-cpp-sdk-s3.so:devel/aws-sdk-cpp \
 				libs2n.so:security/s2n-tls
 
 SKYHOOK_DESC=			Build the Skyhook libraries
 SKYHOOK_CMAKE_BOOL=		ARROW_SKYHOOK
 SKYHOOK_IMPLIES=		DATASET PARQUET
 SKYHOOK_BROKEN=			could NOT find librados
 
 SUBSTRAIT_DESC=			Build the Arrow Substrait Consumer Module
 SUBSTRAIT_CMAKE_BOOL=		ARROW_SUBSTRAIT
 SUBSTRAIT_IMPLIES=		DATASET IPC PARQUET
 SUBSTRAIT_BROKEN=		needs investigation
 
 TENSORFLOW_DESC=		TensorFlow support
 TENSORFLOW_CMAKE_BOOL=		ARROW_TENSORFLOW
 TENSORFLOW_BROKEN=		needs testing
 
 TESTING_DESC=			Arrow testing libraries
 TESTING_CMAKE_BOOL=		ARROW_TESTING
 TESTING_LIB_DEPENDS=		libgtest.so:devel/googletest
 
 # form OPTIONS_DEFAULT
 .for opt in ${OPTIONS_GROUP_COMPONENTS} ${OPTIONS_GROUP_COMPRESSION}
 .  if "${${opt}_BROKEN}" == ""
 OPTIONS_DEFAULT+=	${opt}
 .  endif
 .endfor
 
+CPE_VENDOR=	apache
+
 .include <bsd.port.options.mk>
 
 .if ${PORT_OPTIONS:MCOMPUTE} || ${PORT_OPTIONS:MFLIGHT} || ${PORT_OPTIONS:MGANDIVA}
 PLIST_FILES+=	lib/cmake/Arrow/Findre2Alt.cmake
 .endif
 
 .if ${PORT_OPTIONS:MIPC} && ${PORT_OPTIONS:MBUILD_UTILITIES}
 PLIST_FILES+=	bin/arrow-file-to-stream \
 		bin/arrow-stream-to-file
 .endif
 .if ${PORT_OPTIONS:MGANDIVA} || ${PORT_OPTIONS:MCOMPUTE}
 PLIST_FILES+=	lib/cmake/Arrow/Findutf8proc.cmake
 .endif
 .if ${PORT_OPTIONS:MGANDIVA} || ${PORT_OPTIONS:MZSTD}
 PLIST_FILES+=	lib/cmake/Gandiva/FindzstdAlt.cmake
 .endif
 
 .if ${PORT_OPTIONS:MPYTHON} == "PYTHON" && ${PORT_OPTIONS:MFLIGHT} == "FLIGHT"
     PLIST_SUB+=	PYTHONFLIGHT=""
 .else
     PLIST_SUB+=	PYTHONFLIGHT="@comment "
 .endif
 
 .if ${PORT_OPTIONS:MTESTING} && ${PORT_OPTIONS:MFLIGHT} == "FLIGHT"
     PLIST_SUB+=	TESTINGFLIGHT=""
 .else
     PLIST_SUB+=	TESTINGFLIGHT="@comment "
 .endif
 
 post-install:
 	# based on the user's report on 2024-04-12, the R extension expects only "ON" and "OFF" values in lib/cmake/Arrow/ArrowOptions.cmake
 	# other values confuse the R extension build, so we adjust these values to "ON" and "OFF" as a workaround
 	${REINPLACE_CMD} -i '' \
 		-e 's|"true"|"ON"|; s|"false"|"OFF"|' \
 		${STAGEDIR}${PREFIX}/lib/cmake/Arrow/ArrowOptions.cmake
 
 do-test:
 	@cd ${BUILD_WRKSRC} && \
 		${SETENV} ${CONFIGURE_ENV} ${CMAKE_BIN} ${CMAKE_ARGS} -DARROW_BUILD_TESTS:BOOL=ON ${CMAKE_SOURCE_PATH} && \
 		${SETENV} ${MAKE_ENV} ${MAKE_CMD} ${MAKE_ARGS} ${ALL_TARGET} && \
 		${SETENV} ${MAKE_ENV} ${MAKE_CMD} ${MAKE_ARGS} test
 
 # tests as of : 89% tests passed, 10 tests failed out of 90, see https://github.com/apache/arrow/issues/45604
 
 .include <bsd.port.mk>
diff --git a/databases/dbeaver/Makefile b/databases/dbeaver/Makefile
index e6a41c4d7dc3..89b0041a510d 100644
--- a/databases/dbeaver/Makefile
+++ b/databases/dbeaver/Makefile
@@ -1,69 +1,69 @@
 PORTNAME=	dbeaver
 DISTVERSION=	25.1.3
 PORTREVISION=	3
 CATEGORIES=	databases java
 
 MAINTAINER=	freebsd@sysctl.cz
 COMMENT=	Free universal database tool and SQL client
 WWW=		https://dbeaver.io
 
 LICENSE=	APACHE20
 LICENSE_FILE=	${WRKSRC}/LICENSE.md
 
 ONLY_FOR_ARCHS=	amd64
 
 BUILD_DEPENDS=	maven39>0:devel/maven39
 
-USES=		dos2unix java
+USES=		cpe dos2unix java
 DOS2UNIX_GLOB=	*.MF *.css *.exsd *.java *.properties *.txt *.xml
 USE_GITHUB=	yes
 GH_TUPLE=	dbeaver:dbeaver-common:1379027:common/../dbeaver-common \
 		dbeaver:dbeaver-jdbc-libsql:a2c75c1:jdbc/../dbeaver-jdbc-libsql
 JAVA_VERSION=	21+
 
 SUB_FILES=	${PORTNAME} ${PORTNAME}.desktop
 
 .include <bsd.port.pre.mk>
 
 # For create local maven repository (m2) run: make -DMAINTAINER_MODE
 .if !defined(MAINTAINER_MODE)
 MASTER_SITES+=	LOCAL/vvd:deps
 DISTFILES+=	${PORTNAME}-${PORTVERSION}-deps.tar.xz:deps
 OFFLINE=	-o
 .endif # !defined(MAINTAINER_MODE)
 
 MAVEN_ENV=	MAVEN_OPTS=-Xmx2048m JAVA_HOME=${JAVA_HOME}
 
 # To make the build working, set the (maven) architecture to x86_64 instead of amd64
 # Finally there are problems with amd64
 MAVEN_ARCH=	${ARCH:S|amd64|x86_64|}
 
 MAVEN_PARAMS=	${OFFLINE} \
 		-Djdk.xml.maxGeneralEntitySizeLimit=1000000 \
 		-Djdk.xml.totalEntitySizeLimit=1000000 \
 		-Dmaven.repo.local=${WRKDIR}/m2 \
 		-Dnative=gtk.freebsd.${MAVEN_ARCH} \
 		-DskipTests clean verify \
 		-T ${MAKE_JOBS_NUMBER}
 
 DBEAVER_PATH=	product/community/target/products/org.jkiss.dbeaver.core.product/freebsd/gtk/${MAVEN_ARCH}/dbeaver
 
 do-build:
 	@(cd ${WRKSRC}/product/aggregate && \
 		${SETENV} ${MAVEN_ENV} ${LOCALBASE}/bin/mvn ${MAVEN_PARAMS})
 
 do-install:
 	${MKDIR} ${STAGEDIR}${DATADIR}
 	@(cd ${WRKSRC}/${DBEAVER_PATH} && ${COPYTREE_SHARE} . ${STAGEDIR}${DATADIR})
 	${INSTALL_PROGRAM} ${WRKSRC}/${DBEAVER_PATH}/${PORTNAME} ${STAGEDIR}${DATADIR}
 	${INSTALL_SCRIPT} ${WRKDIR}/${PORTNAME} ${STAGEDIR}${PREFIX}/bin/${PORTNAME}
 	${INSTALL_DATA} ${WRKDIR}/${PORTNAME}.desktop ${STAGEDIR}${DESKTOPDIR}
 	${STRIP_CMD} ${STAGEDIR}${DATADIR}/dbeaver \
 		${STAGEDIR}${DATADIR}/plugins/org.eclipse.equinox.launcher.gtk.freebsd.x86_64_1.2.1400.v20250607-0038/eclipse_11911.so
 	@(cd ${STAGEDIR}${PREFIX} && \
 		${FIND} -s "share/dbeaver" -not -type d >> ${TMPPLIST} && \
 		${FIND} -s -d "share/dbeaver" -type d -empty | ${SED} -ne 's,^,@dir ,p' >> ${TMPPLIST})
 	${ECHO} "bin/${PORTNAME}" >> ${TMPPLIST}
 	${ECHO} "share/applications/${PORTNAME}.desktop" >> ${TMPPLIST}
 
 .include <bsd.port.post.mk>
diff --git a/databases/duckdb/Makefile b/databases/duckdb/Makefile
index e802994d102b..fa132afa8ecb 100644
--- a/databases/duckdb/Makefile
+++ b/databases/duckdb/Makefile
@@ -1,123 +1,123 @@
 PORTNAME=	duckdb
 DISTVERSIONPREFIX=	v
 DISTVERSION=	1.5.3
 CATEGORIES=	databases
 MASTER_SITES=	https://github.com/postgres/postgres/archive/refs/tags/:postgres_sources
 DISTFILES=	REL_15_13.tar.gz:postgres_sources
 
 MAINTAINER=	yuri@FreeBSD.org
 COMMENT=	In-process SQL OLAP database management system
 WWW=		https://duckdb.org/ \
 		https://github.com/duckdb/duckdb
 
 LICENSE=	MIT
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 LIB_DEPENDS=	libcurl.so:ftp/curl
 
-USES=		cmake:testing compiler:c++11-lang ssl
+USES=		cmake:testing compiler:c++11-lang cpe ssl
 USE_GITHUB=	yes
 GH_TUPLE=	\
 		duckdb:duckdb-avro:7f423d69709045e38f8431b3470e0395fce1a595:avro/extension/avro \
 		duckdb:duckdb-aws:38d4ed30b7f5855168f4b494bf9be611c868c69a:aws/extension/aws \
 		duckdb:duckdb-azure:2ad247d4ca090cd2110f2e35531ab6fcdb80c186:azure/extension/azure \
 		duckdb:ducklake:e6a3bd0a8554b74d97cbc7e8acc3e2c9f01a0385:ducklake/extension/ducklake \
 		duckdb:duckdb-encodings:06295e77b13de65842992c82f14289ea679e4730:encodings/extension/encodings \
 		duckdb:duckdb-excel:f4c72b5ef04a03b3a78a95b5a2ee94ba93e3178d:excel/extension/excel \
 		duckdb:duckdb-fts:6814ec9a7d5fd63500176507262b0dbf7cea0095:fts/extension/fts \
 		duckdb:duckdb-httpfs:52afb4204a3238d6ee132e83340f8d68c40ee91c:httpfs/extension/httpfs \
 		duckdb:duckdb-iceberg:4008894c57168e0e9dff00e87cd725c5168fd81e:iceberg/extension/iceberg \
 		duckdb:duckdb-inet:fe7f60bb60245197680fb07ecd1629a1dc3d91c8:inet/extension/inet \
 		duckdb:duckdb-postgres:6b2b12cad3afef61e8a4637e714e8a88895fed1a:postgres/extension/postgres_scanner \
 		duckdb:duckdb-mysql:496ac9e3cb61bd8d6d1255f73cf69b958a311525:mysql/extension/mysql_scanner \
 		duckdb:odbc-scanner:8a3266017af8a9abf14a49e2fd5df83d64eb5520:odbc_scanner/extension/odbc_scanner \
 		duckdb:duckdb-quack:1693647c152b438aa2a6a9ad71764f99c5a561e0:quack/extension/quack \
 		duckdb:duckdb-spatial:b68b309d371dba936c5bb362980e559b7756b16d:spatial/extension/spatial \
 		duckdb:duckdb-sqlite:a087a5878900d8bae155e97fd1b18c4cec0cca21:sqlite/extension/sqlite_scanner \
 		duckdb:duckdb-sqlsmith:e47106c6fef6e019feaf8cedfc2ef737428a386c:sqlsmith/extension/sqlsmith \
 		duckdb:duckdb-vss:b833341c8737fd3f3558c7720cc575ae8fc82598:vss/extension/vss
 # the list of out-of-tree extensions is here: .github/config/out_of_tree_extensions.cmake
 
 CXXFLAGS+=	-I${WRKSRC}/extension/inet/src/include
 CXXFLAGS+=	-I${WRKSRC}/extension/sqlsmith/src/include # https://github.com/duckdb/duckdb/issues/13971
 CXXFLAGS+=	-I${WRKSRC}/extension/fts/extension/fts/include # --""--
 CXXFLAGS+=	-I${WRKSRC}/extension/httpfs/extension/httpfs/include # --""--
 CMAKE_ON=	BUILD_SHARED_LIBS
 CMAKE_OFF=	BUILD_UNITTESTS
 CMAKE_ARGS=	-DOVERRIDE_GIT_DESCRIBE=v${DISTVERSION}-0-g0000000000
 CMAKE_TESTING_ON=	BUILD_UNITTESTS # 1 test fails, Signal 11 during tests, see https://github.com/duckdb/duckdb/issues/13972
 CMAKE_TESTING_TARGET=	${ALL_TARGET} # hack: works as empty target
 
 BINARY_ALIAS=	git=false
 
 OPTIONS_DEFINE=			TPCE
 OPTIONS_DEFAULT=		TPCE
 OPTIONS_GROUP=			EXTENSIONS
 OPTIONS_GROUP_EXTENSIONS=	AUTOCOMPLETE DELTA ICU JSON PARQUET TPCDS TPCH # in-tree extensions (in extension/)
 OPTIONS_GROUP_EXTENSIONS+=	${GH_TUPLE:C/.*extension\///:tu} # out-of-tree extensions (from GH_TUPLE)
 
 DELTA_BROKEN=			Fetches from git during build
 SPATIAL_BROKEN=			Build requires unofficial-sqlite3 dependency
 EXCEL_BROKEN=			https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292757
 MYSQL_SCANNER_BROKEN=		https://github.com/duckdb/duckdb-mysql/issues/207
 POSTGRES_SCANNER_BROKEN=	https://github.com/duckdb/duckdb-postgres/issues/401
 SQLSMITH_BROKEN=		https://github.com/duckdb/duckdb-sqlsmith/issues/66
 AZURE_BROKEN=			Broken because of missing Azure C++ SDK in ports
 ICEBERG_BROKEN=			Broken because of missing roaring dependency
 DUCKLAKE_BROKEN=		Broken because of missing roaring dependency
 QUACK_BROKEN=			Need to investigate
 
 AVRO_LIB_DEPENDS=		libavro.so:devel/avro-c \
 				libjansson.so:devel/jansson \
 				libsnappy.so:archivers/snappy
 AVRO_BROKEN=			requires custom fork of avro-c: duckdb/duckdb-avro-c
 AWS_LIB_DEPENDS=		libaws-cpp-sdk-core.so:devel/aws-sdk-cpp
 AWS_BROKEN=			need to investigate
 ODBC_SCANNER_LIB_DEPENDS=	libodbc.so:databases/unixODBC
 ODBC_SCANNER_BROKEN=		need to investigate
 
 EXTENSIONS_DESC=		Extensions:
 
 .for opt in ${OPTIONS_GROUP_EXTENSIONS}
 .  if "${${opt}_BROKEN}" == ""
 OPTIONS_DEFAULT+=	${opt}
 .  endif
 ${opt}_DESC=		Build the ${opt} extension
 DUCKDB_EXTENSIONS+=	${PORT_OPTIONS:M${opt}:S/${opt}/;${opt:tl}/}
 ${opt}_PLIST_FILES=	${PORT_OPTIONS:M${opt}:S/${opt}/lib\/lib${opt:tl}_extension.a/}
 LIB_DEPENDS+=		${PORT_OPTIONS:M${opt}:?${${opt}_LIB_DEPENDS}:}
 .endfor
 
 CMAKE_ARGS+=	-DBUILD_EXTENSIONS="${DUCKDB_EXTENSIONS:tW:S/ //g:S/^;//}" \
 		-DDUCKDB_MAJOR_VERSION=${PORTVERSION:R:R} \
 		-DDUCKDB_MINOR_VERSION=${PORTVERSION:R:E} \
 		-DDUCKDB_PATCH_VERSION=${PORTVERSION:E}
 CMAKE_ARGS+=	-DSKIP_EXTENSIONS=jemalloc # temporary? see https://github.com/duckdb/duckdb/issues/14363#issuecomment-2412095766
 
 SQLITE_SCANNER_CXXFLAGS=	-I${WRKSRC}/extension/sqlite_scanner/src/include # workaround for the header not being found
 ENCODINGS_CXXFLAGS=		-I${WRKSRC}/extension/encodings/src/include # workaround for the header not being found
 HTTPFS_CXXFLAGS=		-I${WRKSRC}/extension/httpfs/src/include # workaround for the header not being found
 POSTGRES_SCANNER_USES=		localbase
 POSTGRES_SCANNER_CXXFLAGS=	-I${WRKSRC}/extension/postgres_scanner/src/include # workaround for the header not being found
 MYSQL_SCANNER_USES=		mysql:client
 
 TPCE_DESC=			Enable building of the TPC-E tool
 TPCE_CMAKE_BOOL=		BUILD_TPCE
 
 VSS_CXXFLAGS=			-I${WRKSRC}/extension/vss/src/include # workaround for the header not being found
 
 post-extract:
 	# remove the jemalloc extension directory just in case
 	@${RM} -r ${WRKSRC}/extension/jemalloc
 	# create symlink to Postgres sources for the postgres_scanner extension
 	@${LN} -s ${WRKDIR}/postgres-REL_15_13 ${WRKSRC}/extension/postgres_scanner/postgres
 
 post-patch: # remove cmake files of out-of-tree extensions to build them like in-tree extensions (avoid fetching from git)
 	@${RM} ${WRKSRC}/.github/config/extensions/*.cmake
 
 post-test: # run tests
 	@cd ${TEST_WRKSRC} && test/unittest
 
 # tests as of 1.5.3: All tests passed (22 skipped tests, 978885 assertions in 4469 test cases)
 
 .include <bsd.port.mk>
diff --git a/databases/iowow/Makefile b/databases/iowow/Makefile
index d87a62f78034..1409fe9d5c0f 100644
--- a/databases/iowow/Makefile
+++ b/databases/iowow/Makefile
@@ -1,28 +1,30 @@
 PORTNAME=	iowow
 PORTVERSION=	1.4.18
 DISTVERSIONPREFIX=	v
 CATEGORIES=	databases
 
 MAINTAINER=	danfe@FreeBSD.org
 COMMENT=	Persistent key-value database engine
 WWW=		https://iowow.softmotions.com/
 
 LICENSE=	MIT
 
-USES=		cmake compiler:c11
+USES=		cmake compiler:c11 cpe
 USE_GITHUB=	yes
 GH_ACCOUNT=	Softmotions
 USE_LDCONFIG=	yes
 
 PLIST_SUB+=	VERSION=${PORTVERSION}
 PORTDOCS=	Changelog README
 
 OPTIONS_DEFINE=	DOCS TEST
 
 TEST_BUILD_DEPENDS=	${LOCALBASE}/include/CUnit/Basic.h:devel/cunit
 TEST_CMAKE_ON=	-DBUILD_TESTS:BOOL=ON
 
+CPE_VENDOR=	${GH_ACCOUNT}
+
 do-test-TEST-on:
 	@cd ${TEST_WRKSRC} && ctest -C ${CMAKE_BUILD_TYPE} ${_MAKE_JOBS}
 
 .include <bsd.port.mk>
diff --git a/databases/libmemcached/Makefile b/databases/libmemcached/Makefile
index e9e71a8f1ec2..4411fff58d7b 100644
--- a/databases/libmemcached/Makefile
+++ b/databases/libmemcached/Makefile
@@ -1,53 +1,55 @@
 PORTNAME=	libmemcached
 PORTVERSION=	1.1.4
 PORTREVISION=	1
 CATEGORIES=	databases
 
 MAINTAINER=	sunpoet@FreeBSD.org
 COMMENT=	C/C++ client library and tools for the memcached server
 WWW=		https://awesomized.github.io/libmemcached/ \
 		https://github.com/awesomized/libmemcached
 
 LICENSE=	BSD3CLAUSE
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 LIB_DEPENDS=	libevent.so:devel/libevent
 TEST_DEPENDS=	memcached:databases/memcached \
 		onetbb>=0:devel/onetbb
 
-USES=		bison compiler:c++11-lang pkgconfig ssl
+USES=		bison compiler:c++11-lang cpe pkgconfig ssl
 
 CMAKE_OFF=	BUILD_DOCSONLY \
 		BUILD_DOCS_MANGZ \
 		BUILD_DOCS_HTML \
 		BUILD_TESTING \
 		ENABLE_DTRACE
 CMAKE_ON=	BUILD_SHARED_LIBS \
 		ENABLE_MEMASLAP \
 		ENABLE_OPENSSL_CRYPTO
 USE_LDCONFIG=	yes
 
 USE_GITHUB=	yes
 GH_ACCOUNT=	awesomized
 
 OPTIONS_DEFINE=	DOCS MANPAGES SASL
 OPTIONS_GROUP=	HASH
 OPTIONS_GROUP_HASH=	FNV64 HSIEH MURMUR
 OPTIONS_DEFAULT=FNV64 HSIEH MURMUR SASL
 OPTIONS_SUB=	yes
 FNV64_DESC=	Enable fnv64 hashing
 HSIEH_DESC=	Enable hsieh hashing
 MEMASLAP_DESC=	Load generation and benchmark tool
 MURMUR_DESC=	Enable murmur hashing
 
 FNV64_CMAKE_BOOL=	ENABLE_HASH_FNV64
 HSIEH_CMAKE_BOOL=	ENABLE_HASH_HSIEH
 MANPAGES_BUILD_DEPENDS=	${PYTHON_PKGNAMEPREFIX}sphinx>=0,1:textproc/py-sphinx@${PY_FLAVOR}
 MANPAGES_CMAKE_BOOL=	BUILD_DOCS BUILD_DOCS_MAN
 MANPAGES_USES=		cmake:noninja,testing python:env
 MANPAGES_USES_OFF=	cmake:testing
 MURMUR_CMAKE_BOOL=	ENABLE_HASH_MURMUR
 SASL_CMAKE_BOOL=	ENABLE_SASL
 SASL_LIB_DEPENDS=	libsasl2.so:security/cyrus-sasl2
 
+CPE_VENDOR=		awesome
+
 .include <bsd.port.mk>
diff --git a/databases/libmongocrypt/Makefile b/databases/libmongocrypt/Makefile
index 3f98e39d3437..b0c2c7cd47b6 100644
--- a/databases/libmongocrypt/Makefile
+++ b/databases/libmongocrypt/Makefile
@@ -1,28 +1,30 @@
 PORTNAME=	libmongocrypt
 DISTVERSION=	1.15.1
 CATEGORIES=	databases
 
 MAINTAINER=	hiroo.ono+freebsd@gmail.com
 COMMENT=	MongoDB companion C library for client side encryption in drivers
 WWW=		https://github.com/mongodb/libmongocrypt
 
 LICENSE=	APACHE20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 LIB_DEPENDS=	libbson-1.0.so:devel/libbson \
 		libmongoc-1.0.so:devel/mongo-c-driver
 
-USES=		cmake python:build ssl
+USES=		cmake cpe python:build ssl
 
 USE_GITHUB=	yes
 GH_ACCOUNT=	mongodb
 
 USE_LDCONFIG=	yes
 
 CMAKE_ARGS=	-DBUILD_VERSION=${DISTVERSION} \
 		-DMONGOCRYPT_MONGOC_DIR="USE-SYSTEM"
 CMAKE_ON=	USE_SHARED_LIBBSON
 CMAKE_OFF=	BUILD_TESTING ENABLE_ONLINE_TESTS \
 		MONGOCRYPT_ENABLE_DECIMAL128
 
+CPE_VENDOR=	${GH_ACCOUNT}
+
 .include <bsd.port.mk>
diff --git a/databases/litestream/Makefile b/databases/litestream/Makefile
index 9eaa04af2f3c..6c24bad8ed5c 100644
--- a/databases/litestream/Makefile
+++ b/databases/litestream/Makefile
@@ -1,25 +1,25 @@
 PORTNAME=	litestream
 PORTVERSION=	0.5.11
 DISTVERSIONPREFIX=	v
 PORTREVISION=	1
 CATEGORIES=	databases
 
 MAINTAINER=	sunpoet@FreeBSD.org
 COMMENT=	Streaming replication for SQLite
 WWW=		https://litestream.io/ \
 		https://github.com/benbjohnson/litestream
 
 LICENSE=	GPLv3
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 ONLY_FOR_ARCHS=	aarch64 amd64
 ONLY_FOR_ARCHS_REASON=	module modernc.org/sqlite only supported on aarch64 and amd64
 
-USES=		go:modules
+USES=		cpe go:modules
 
 GO_MODULE=	github.com/benbjohnson/litestream
 GO_TARGET=	./cmd/litestream
 
 PLIST_FILES=	bin/litestream
 
 .include <bsd.port.mk>
diff --git a/databases/qdrant/Makefile b/databases/qdrant/Makefile
index 0a198d8569ca..854eba2ca978 100644
--- a/databases/qdrant/Makefile
+++ b/databases/qdrant/Makefile
@@ -1,51 +1,51 @@
 PORTNAME=	qdrant
 DISTVERSIONPREFIX=	v
 DISTVERSION=	1.18.1
 PORTEPOCH=	1
 CATEGORIES=	databases
 
 MAINTAINER=	yuri@FreeBSD.org
 COMMENT=	Vector search engine and database for the next gen AI applications
 WWW=		https://qdrant.tech \
 		https://github.com/qdrant/qdrant
 
 LICENSE=	APACHE20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 BROKEN_armv7=	compiler crashes, see https://github.com/rust-lang/rust/issues/120637
 BROKEN_i386=	compilation breaks with fatal warning: implicit conversion from 'std::numeric_limits<unsigned long long>::type' (aka 'unsigned long long') to 'size_t' (aka 'unsigned int') changes value from 18446744073709551615 to 4294967295
 BROKEN_powerpc64le=	compilation failure: called `Option::unwrap()` on a `None` value in ring-0.16.20/build.rs: # see https://github.com/qdrant/qdrant/issues/3392
 
 BUILD_DEPENDS=	protoc:devel/protobuf
 LIB_DEPENDS=	librocksdb.so:databases/rocksdb \
 		libzstd.so:archivers/zstd
 
-USES=		cargo gmake llvm:min=13 perl5 pkgconfig
+USES=		cargo cpe gmake llvm:min=13 perl5 pkgconfig
 USE_GITHUB=	yes
 USE_PERL5=	build
 USE_RC_SUBR=	qdrant
 
 MAKE_ENV=	AWS_LC_SYS_NO_JITTER_ENTROPY=1 # workaround for https://github.com/aws/aws-lc-rs/issues/1097
 
 QDRANT_DBDIR?=	/var/db/qdrant
 QDRANT_USER?=	nobody
 QDRANT_GROUP?=	nobody
 
 SUB_LIST=	RC_SUBR_SUFFIX=${RC_SUBR_SUFFIX}
 
 PLIST_SUB=	QDRANT_DBDIR=${QDRANT_DBDIR} \
 		QDRANT_GROUP=${QDRANT_GROUP} \
 		QDRANT_USER=${QDRANT_USER}
 
 post-patch:
 	${REINPLACE_CMD} -e "s,%%DBDIR%%,${QDRANT_DBDIR},g; \
 		s,%%ETCDIR%%,${ETCDIR},g" ${WRKSRC}/config/config.yaml
 
 post-install:
 # install config sample
 	${MKDIR} ${STAGEDIR}${ETCDIR}
 	${MKDIR} ${STAGEDIR}${ETCDIR}/tls
 	${MKDIR} ${STAGEDIR}${QDRANT_DBDIR}
 	${INSTALL_DATA} ${WRKSRC}/config/config.yaml ${STAGEDIR}${ETCDIR}/config.yaml.sample
 
 .include <bsd.port.mk>
diff --git a/databases/soci/Makefile b/databases/soci/Makefile
index ec8b490776fc..02cd370bf96d 100644
--- a/databases/soci/Makefile
+++ b/databases/soci/Makefile
@@ -1,57 +1,59 @@
 PORTNAME=	soci
 DISTVERSIONPREFIX=	v
 DISTVERSION=	4.1.2
 PORTREVISION=	2
 CATEGORIES=	databases
 
 MAINTAINER=	jbo@FreeBSD.org
 COMMENT=	C++ Database Access Library
 WWW=		https://soci.sourceforge.net/
 
 LICENSE=	BSL
 LICENSE_FILE=	${WRKSRC}/LICENSE_1_0.txt
 
-USES=		cmake compiler:c++14-lang
+USES=		cmake compiler:c++14-lang cpe
 
 USE_GITHUB=	yes
 GH_ACCOUNT=	SOCI
 
 USE_LDCONFIG=	yes
 
 CMAKE_OFF=	SOCI_DB2 SOCI_ORACLE
 
 OPTIONS_DEFINE=		BOOST FIREBIRD MYSQL ODBC PGSQL SQLITE
 OPTIONS_DEFAULT=	BOOST FIREBIRD MYSQL ODBC PGSQL SQLITE
 
 # firebird is currently only available on x86.
 OPTIONS_EXCLUDE_aarch64=	FIREBIRD
 OPTIONS_EXCLUDE_armv6=		FIREBIRD
 OPTIONS_EXCLUDE_armv7=		FIREBIRD
 OPTIONS_EXCLUDE_powerpc=	FIREBIRD
 OPTIONS_EXCLUDE_powerpc64=	FIREBIRD
 OPTIONS_EXCLUDE_riscv64=	FIREBIRD
 
 OPTIONS_SUB=	yes
 
 BOOST_DESC=		Enable support for additional types using Boost
 BOOST_LIB_DEPENDS=	libboost_date_time.so:devel/boost-libs
 BOOST_CMAKE_BOOL=	WITH_BOOST
 
 FIREBIRD_USES=		firebird
 FIREBIRD_CMAKE_BOOL=	SOCI_FIREBIRD
 
 MYSQL_LIB_DEPENDS=	libunwind.so:devel/libunwind
 MYSQL_USES=		mysql ssl
 MYSQL_CMAKE_BOOL=	SOCI_MYSQL
 
 ODBC_LIB_DEPENDS=	libodbc.so:databases/unixODBC
 ODBC_CMAKE_BOOL=	SOCI_ODBC
 ODBC_CMAKE_ON=		-DODBC_LIBRARY:FILE_PATH=${LOCALBASE}/lib/libodbc.so
 
 PGSQL_USES=		pgsql
 PGSQL_CMAKE_BOOL=	SOCI_POSTGRESQL
 
 SQLITE_USES=		sqlite
 SQLITE_CMAKE_BOOL=	SOCI_SQLITE3
 
+CPE_VENDOR=		${PORTNAME}_project
+
 .include <bsd.port.mk>
diff --git a/databases/sqlite3/Makefile b/databases/sqlite3/Makefile
index 0c39220c32ba..e8b731139c8b 100644
--- a/databases/sqlite3/Makefile
+++ b/databases/sqlite3/Makefile
@@ -1,314 +1,317 @@
 PORTNAME=	sqlite3
 DISTVERSION=	3.53.1
 # SECURITY WARNING: when updating this port, also file vuxml entry
 # for ports/databases/linux-c7-sqlite3 (but mind it has a different EPOCH)
 # and coordinate with ports/emulators/linux_base which also ships sqlite3.
 PORTEPOCH=	1
 CATEGORIES=	databases
 MASTER_SITES=	https://www.sqlite.org/${_YEAR}/ https://www2.sqlite.org/${_YEAR}/ https://www3.sqlite.org/${_YEAR}/
 .if defined(TEA)
 PKGNAMEPREFIX=	tcl-
 .endif
 DISTNAME=	sqlite-src-${PORTVERSION:C/\.([[:digit:]])[[:>:]]/0\1/g:S/.//g}00
 
 MAINTAINER=	sunpoet@FreeBSD.org
 COMMENT=	SQL database engine in a C library
 .if ${FLAVOR:U} == icu
 COMMENT+=	(ICU flavor)
 .endif
 .if ${FLAVOR:U} == tcl
 COMMENT+=	(TCL flavor)
 .endif
 .if defined(TEA)
 COMMENT=	SQLite extension for Tcl using the Tcl Extension Architecture (TEA)
 .endif
 WWW=		https://www.sqlite.org/ \
 		https://github.com/sqlite/sqlite
 
 LICENSE=	PD
 LICENSE_FILE=	${WRKSRC}/LICENSE.md
 
 .if !defined(TEA)
 FLAVORS=	default icu tcl
 FLAVOR?=	${FLAVORS:[1]}
 icu_PKGNAMESUFFIX=	-${FLAVOR}	# databases/p5-DBD-SQLite with ICU support
 tcl_PKGNAMESUFFIX=	-${FLAVOR}	# lang/tcl* support
 .endif
 
-USES=	libtool ncurses zip
+USES=	cpe libtool ncurses zip
 USE_LDCONFIG=	yes
 
 HAS_CONFIGURE=	yes
 CONFIGURE_ARGS=	--linemacros \
 		--prefix=${PREFIX} \
 		--soname=legacy OPTIONS='${_OPTIONS}'
 # [The Chronicles of SONAME](https://sqlite.org/src/forumpost/5a3b44f510df8ded)
 # [Set features OPTIONS for autosetup configurator](https://msteveb.github.io/autosetup/)
 MAKE_JOBS_UNSAFE=	yes
 ALL_TARGET=	sqldiff
 .if defined(TEA)
 INSTALL_TARGET=	tcl_install
 .endif
 TEST_TARGET=	test
 
 PLIST_SUB=	PORTVERSION=${PORTVERSION}
 
 # The default numeric file permissions for newly created database files under unix.
 # If not specified, the default is 0644 which means that the files is globally
 # readable but only writable by the creator.
 .ifdef DEFAULT_FILE_PERMISSIONS
 CPPFLAGS+=	-DSQLITE_DEFAULT_FILE_PERMISSIONS=${DEFAULT_FILE_PERMISSIONS}
 .endif
 
 CONFLICTS_INSTALL=	sqlite3 sqlite3-icu sqlite3-tcl tcl-sqlite3 # include/sqlite3.h share/examples/sqlite3/example.tcl
 
 SUB_FILES=	example.tcl
 SUB_LIST=	TCLSH_CMD=${TCLSH}
 
 .if defined(TEA)
 USES+=	sqlite
 DESCR=	${MASTERDIR}/pkg-descr-tea
 SUB_LIST+=	TEA="" NO_TEA="@comment "
 PLIST_SUB+=	TEA="" NO_TEA="@comment "
 .else
 SUB_LIST+=	TEA="@comment " NO_TEA=""
 PLIST_SUB+=	TEA="@comment " NO_TEA=""
 .endif
 
 PLIST_SUB+=	TCLVER=tcl${TCL_VER} TCLSUF=tcl${TCL_VER:S/.//g} DISTVERSION=${DISTVERSION}
 
 # Compilation Options For SQLite https://www.sqlite.org/compile.html
 OPTIONS_DEFINE=		EXAMPLES STRIP TCL THREADS
 .if !defined(TEA)
 OPTIONS_DEFINE+=	ARMOR DBPAGE DBSTAT DIRECT_READ DQS EXTENSION FTS3_TOKEN \
 			FTS4 FTS5 LIKENOTBLOB MEMMAN METADATA NORMALIZE NULL_TRIM RBU SECURE_DELETE \
 			SORT_REF STATIC STMT TRUSTED_SCHEMA UNKNOWN_SQL UNLOCK_NOTIFY \
 			UPDATE_LIMIT URI URI_AUTHORITY
 .endif
 OPTIONS_DEFAULT=	DBPAGE DBSTAT DIRECT_READ EXTENSION FTS3_TOKEN FTS4 FTS5 LIBEDIT METADATA \
 			RTREE SECURE_DELETE SESSION STRIP THREADS TS1 UNICODE61 UNLOCK_NOTIFY URI
 # SECURE_DELETE, UNLOCK_NOTIFY, DBSTAT (since 41.0) used by www/firefox et al.
 # RTREE used by graphics/mapnik, databases/spatialite
 # FTS3_TOKEN used by audio/clementine-player, mail/thunderbird, www/seamonkey
 # FTS5 used by sysutils/tracker
 # JSON1 used by net-im/py-matrix-synapse (since SQLite 3.38.0 included by default)
 # DBPAGE used by audio/audacity (since 3.0.0)
 # DQS used by multimedia/emby-server, multimedia/tautulli, net/vnstat, www/qutebrowser
 #
 .if !defined(TEA)
 OPTIONS_GROUP=		OPT_EXT OPT_FUNC RTREEG UNICODE
 .endif
 OPTIONS_GROUP_OPT_EXT=	SESSION
 OPTIONS_GROUP_OPT_FUNC=	OFFSET SOUNDEX
 OPTIONS_GROUP_RTREEG=	GEOPOLY RTREE RTREE_INT
 OPTIONS_GROUP_UNICODE=	ICU UNICODE61
 .if !defined(TEA)
 OPTIONS_RADIO=		STAT RL
 .endif
 OPTIONS_RADIO_RL=	LIBEDIT READLINE
 OPTIONS_RADIO_STAT=	STAT3 STAT4
 .if !defined(TEA)
 OPTIONS_SINGLE=		RAMT
 .endif
 OPTIONS_SINGLE_RAMT=	TS0 TS1 TS2 TS3
 .if ${FLAVOR:U} == icu
 OPTIONS_EXCLUDE=	UNICODE61
 OPTIONS_SLAVE=		ICU
 .endif
 .if ${FLAVOR:U} == tcl || defined(TEA)
 OPTIONS_SLAVE=		TCL
 .endif
 OPTIONS_SUB=		yes
 
 ARMOR_DESC=		Detect misuse of the API # https://www.sqlite.org/compile.html#enable_api_armor
 DBPAGE_DESC=		Enable DBPAGE Virtual Table # https://sqlite.org/compile.html#enable_dbpage_vtab
 DBSTAT_DESC=		Enable DBSTAT Virtual Table # https://www.sqlite.org/dbstat.html
 DIRECT_READ_DESC=	File is read directly from disk # https://sqlite.org/compile.html#direct_overflow_read
 DQS_DESC=		Double-quoted String Literals # https://www.sqlite.org/compile.html#dqs
 EXTENSION_DESC=		Enable loadable extensions
 FTS3_TOKEN_DESC=	Enable two-args version fts3_tokenizer # https://www.sqlite.org/compile.html#enable_fts3_tokenizer, https://www.sqlite.org/fts3.html#f3tknzr
 FTS4_DESC=		Enable FTS3/4 (Full Text Search) module # https://www.sqlite.org/fts3.html, https://www.sqlite.org/compile.html#enable_fts3_parenthesis
 FTS5_DESC=		Enable version 5 full-text search engine # https://www.sqlite.org/fts5.html
 GEOPOLY_DESC=		Uses the GeoJSON notation (RFC-7946) # https://www.sqlite.org/geopoly.html
 LIKENOTBLOB_DESC=	LIKE does not match blobs # https://sqlite.org/compile.html#like_doesnt_match_blobs
 MEMMAN_DESC=		Allow it to release unused memory
 METADATA_DESC=		Enable column metadata
 NORMALIZE_DESC=		Enable normalized sql function
 NULL_TRIM_DESC=		Omits NULL columns at the ends of rows # https://sqlite.org/compile.html#enable_null_trim
 OFFSET_DESC=		Enable sqlite_offset() returning records file offset # http://www.sqlite.org/compile.html#enable_offset_sql_func
 OPT_EXT_DESC=		Optional extensions
 OPT_FUNC_DESC=		Optional functions
 RAMT_DESC=		Where to store temporary file # https://www.sqlite.org/tempfiles.html#tempstore
 RBU_DESC=		Enable the resumable bulk update # https://www.sqlite.org/rbu.html
 RL_DESC=		Command line editing library
 RTREEG_DESC=		Index type for range queries # https://www.sqlite.org/rtree.html
 RTREE_DESC=		Enable R*Tree module
 RTREE_INT_DESC=		Store 32-bit sig int (no float) coordinates
 SECURE_DELETE_DESC=	Overwrite deleted information with zeros
 SESSION_DESC=		Enable the session extension # https://www.sqlite.org/sessionintro.html
 SORT_REF_DESC=		To use references in the sorter # https://www.sqlite.org/compile.html#enable_sorter_references
 SOUNDEX_DESC=		Enable the soundex() SQL function
 STAT3_DESC=		Collect histogram data from leftmost column
 STAT4_DESC=		Collect histogram data from all columns
 STAT_DESC=		Which query planner to use, stability or ... # https://www.sqlite.org/queryplanner-ng.html#qpstab
 STMT_DESC=		Prepared statement scan status # https://www.sqlite.org/c3ref/stmt_scanstatus.html
 TCL_DESC=		Enable tcl extension and sqlite_analyzer
 TRUSTED_SCHEMA_DESC=	SQL functions & virtual tables are considered unsafe # https://www.sqlite.org/compile.html#trusted_schema
 TS0_DESC=		Always use temporary file
 TS1_DESC=		File by default, change allowed PRAGMA
 TS2_DESC=		Memory by default, change allowed PRAGMA
 TS3_DESC=		Always use memory
 UNICODE61_DESC=		Unicode Version 6.1 tokenizer # https://www.sqlite.org/fts3.html#tokenizer
 UNKNOWN_SQL_DESC=	Suppress unknown function errors # http://sqlite.org/compile.html#enable_unknown_sql_function
 UNLOCK_NOTIFY_DESC=	Enable notification on unlocking
 UPDATE_LIMIT_DESC=	UPDATE/DELETE is extended with ORDER BY and LIMIT # https://www.sqlite.org/compile.html#enable_update_delete_limit
 URI_AUTHORITY_DESC=	Allow convert URL into a UNC
 URI_DESC=		Enable use the URI filename
 
 ARMOR_CPPFLAGS=	-DSQLITE_ENABLE_API_ARMOR=1
 DBPAGE_CPPFLAGS=	-DSQLITE_ENABLE_DBPAGE_VTAB=1
 DBSTAT_CPPFLAGS=	-DSQLITE_ENABLE_DBSTAT_VTAB=1
 DIRECT_READ_CPPFLAGS_OFF=	-DSQLITE_DIRECT_OVERFLOW_READ=0
 DQS_CPPFLAGS=	-DSQLITE_DQS=3
 DQS_CPPFLAGS_OFF=	-DSQLITE_DQS=0
 EXTENSION_CONFIGURE_ENABLE=	load-extension
 FTS3_TOKEN_CPPFLAGS=	-DSQLITE_ENABLE_FTS3_TOKENIZER=1
 FTS4_CONFIGURE_ON=	--fts3 --fts4
 FTS4_CPPFLAGS=	-DSQLITE_ENABLE_FTS3_PARENTHESIS=1
 FTS5_CONFIGURE_ON=	--fts5
 FTS5_VARS=	_OPTIONS+=-lm
 GEOPOLY_IMPLIES=	RTREE
 GEOPOLY_CONFIGURE_ON=	--geopoly
 ICU_BUILD_DEPENDS=	${LOCALBASE}/bin/icu-config:devel/icu
 ICU_LIB_DEPENDS=	libicudata.so:devel/icu
 ICU_CONFIGURE_ON=	--with-icu-config=${LOCALBASE}/bin/icu-config --icu-collations
 ICU_CPPFLAGS=		`${LOCALBASE}/bin/icu-config --cppflags`
 LIBEDIT_USES=	libedit
 LIBEDIT_CONFIGURE_ON=	--editline
 LIKENOTBLOB_CPPFLAGS=	-DSQLITE_LIKE_DOESNT_MATCH_BLOBS=1
 MEMMAN_CPPFLAGS=	-DSQLITE_ENABLE_MEMORY_MANAGEMENT=1
 METADATA_CPPFLAGS=	-DSQLITE_ENABLE_COLUMN_METADATA=1
 NORMALIZE_CPPFLAGS=	-DSQLITE_ENABLE_NORMALIZE=1
 NULL_TRIM_CPPFLAGS=	-DSQLITE_ENABLE_NULL_TRIM=1
 OFFSET_CPPFLAGS=	-DSQLITE_ENABLE_OFFSET_SQL_FUNC=1
 RBU_CPPFLAGS=	-DSQLITE_ENABLE_RBU=1
 READLINE_USES=	readline
 READLINE_CONFIGURE_ENABLE=	readline
 RTREE_CONFIGURE_ON=	--rtree
 RTREE_INT_CPPFLAGS=	-DSQLITE_RTREE_INT_ONLY=1
 SECURE_DELETE_CPPFLAGS=	-DSQLITE_SECURE_DELETE=1
 SESSION_CONFIGURE_ON=	--session
 SORT_REF_CPPFLAGS=	-DSQLITE_ENABLE_SORTER_REFERENCES=1
 SOUNDEX_CPPFLAGS=	-DSQLITE_SOUNDEX=1
 STAT3_CPPFLAGS=	-DSQLITE_ENABLE_STAT3=1
 STAT4_CPPFLAGS=	-DSQLITE_ENABLE_STAT4=1
 STATIC_CONFIGURE_OFF=	--dynlink-tools
 STATIC_CONFIGURE_ENABLE=	static
 STMT_CONFIGURE_ON=	--scanstatus
 TCL_USES=	tcl
 TCL_USES_OFF=	tcl:build
 TCL_CONFIGURE_OFF=	--disable-tcl
 TCL_CONFIGURE_ENV=	ac_cv_prog_TCLSH_CMD=${TCLSH}
 TCL_ALL_TARGET+=	sqlite3_analyzer
 THREADS_CONFIGURE_OFF=	--disable-threadsafe
 THREADS_VARS=	_OPTIONS+=-lpthread
 TRUSTED_SCHEMA_CPPFLAGS=	-DSQLITE_TRUSTED_SCHEMA=0
 TS0_CONFIGURE_ON=	--with-tempstore=never
 TS1_CONFIGURE_ON=	--with-tempstore=no
 TS2_CONFIGURE_ON=	--with-tempstore=yes
 TS3_CONFIGURE_ON=	--with-tempstore=always
 UNICODE61_CPPFLAGS_OFF=	-DSQLITE_DISABLE_FTS3_UNICODE=1
 UNKNOWN_SQL_CPPFLAGS=	-DSQLITE_ENABLE_UNKNOWN_SQL_FUNCTION=1
 UNLOCK_NOTIFY_CPPFLAGS=	-DSQLITE_ENABLE_UNLOCK_NOTIFY=1
 UPDATE_LIMIT_CONFIGURE_ON=	--update-limit
 URI_CPPFLAGS=	-DSQLITE_USE_URI=1
 URI_AUTHORITY_CPPFLAGS=	-DSQLITE_ALLOW_URI_AUTHORITY=1
 
+CPE_VENDOR=	sqlite
+CPE_PRODUCT=	sqlite
+
 .include <bsd.port.options.mk>
 
 # _YEAR=	${%Y:L:gmtime} - do not work with the version from the previous year
 _YEAR=	2026
 
 # Recommended options
 # https://sqlite.org/compile.html#strict_subtype
 .if defined(SQLITE_STRICT_SUBTYPE)
 CPPFLAGS+=	-DSQLITE_STRICT_SUBTYPE=${SQLITE_STRICT_SUBTYPE}
 .else
 # This recommended option helps to identify problems in the implementation of application-defined SQL functions early in the development cycle.
 CPPFLAGS+=	-DSQLITE_STRICT_SUBTYPE=1
 .endif
 
 # Platform Configuration
 # -DHAVE_POSIX_FALLOCATE=1 not yet, chunksize.test ZFS failure chunksize-1.2 expected: [32768] got: [2048]
 CPPFLAGS+=	-DHAVE_FCHOWN=1 \
 		-DHAVE_FDATASYNC=1 \
 		-DHAVE_ISNAN=1 \
 		-DHAVE_GMTIME_R=1 \
 		-DHAVE_LOCALTIME_R=1 \
 		-DHAVE_LSTAT=1 \
 		-DHAVE_MALLOC_USABLE_SIZE=1 \
 		-DHAVE_PREAD=1 \
 		-DHAVE_PWRITE=1 \
 		-DHAVE_USLEEP=1 \
 		-DHAVE_STRCHRNUL=1 \
 		-DHAVE_STRERROR_R=1 \
 		-DHAVE_READLINK=1 \
 		-DSQLITE_OS_UNIX=1
 
 .if ${PORT_OPTIONS:MTCL}
 LIB_DEPENDS+=	libtommath.so:math/libtommath
 .endif
 
 # For compare with checksum from of the site. Now, this is a NIST SHA3-256 hash. sha256 not suitable for compare.
 # But the creation of a new target does not justify the emergence of dependence on the perl5.
 # sha3sum maybe installed with p5-Digest-SHA3 port.
 # EXTRACT_DEPENDS=p5-Digest-SHA3:security/p5-Digest-SHA3; USES=perl5; USE_PERL5=extract;
 # @${PERL} -MDigest::SHA3 -le 'print Digest::SHA3->new(sha_256_hex)->add(<>)->hexdigest' < ${DISTDIR}/${ALLFILES}
 post-fetch:
 	@${WHICH} sha3sum > /dev/null && for entry in ${ALLFILES}; do ${ECHO_MSG} -n "=> "; sha3sum -a 256 --tag "${DISTDIR}/$${entry}"; done || ${TRUE}
 
 post-configure:
 	@${ECHO_MSG} "===> CONFIGURE_ARGS=${CONFIGURE_ARGS}"
 	@${ECHO_MSG} "===> CFLAGS=${CFLAGS}"
 	@${ECHO_MSG} "===> CPPFLAGS=${CPPFLAGS}"
 	@${ECHO_MSG} "===> LDFLAGS=${LDFLAGS}"
 	@${ECHO_MSG} "===> LIBS=${LIBS}"
 	@${ECHO_MSG} "===> TCL_VER=${TCL_VER}"
 	@${ECHO_MSG} "===> TCLSH=${TCLSH}"
 	@${ECHO_MSG} "===> TCL_INCLUDEDIR=${TCL_INCLUDEDIR}"
 	@${ECHO_MSG} "===> TCL_LIBDIR=${TCL_LIBDIR}"
 	@${ECHO_MSG} "===> OPTIONS=${_OPTIONS}"
 
 post-install:
 .if !defined(TEA)
 	${INSTALL_DATA} ${WRKSRC}/sqlite_cfg.h ${STAGEDIR}${PREFIX}/include
 	${INSTALL_MAN} ${WRKSRC}/sqlite3.1 ${STAGEDIR}${PREFIX}/share/man/man1
 	${RM} ${STAGEDIR}${PREFIX}/include/msvc.h
 	${SETENV} LD_LIBMAP_DISABLE=1 ldd -a ${STAGEDIR}${PREFIX}/bin/sqlite3 ${STAGEDIR}${PREFIX}/lib/libsqlite3.so
 	${INSTALL_PROGRAM} ${WRKSRC}/sqldiff ${STAGEDIR}${PREFIX}/bin
 .else
 	${RM} ${STAGEDIR}${PREFIX}/lib/libsqlite3.so.${DISTVERSION} ${STAGEDIR}${PREFIX}/lib/libsqlite3.a
 .endif
 
 post-install-STRIP-on:
 .if !defined(TEA)
 	${STRIP_CMD} ${STAGEDIR}${PREFIX}/bin/sqlite3 ${STAGEDIR}${PREFIX}/lib/libsqlite3.so
 .endif
 .if ${PORT_OPTIONS:MTCL}
 	${STRIP_CMD} ${STAGEDIR}${PREFIX}/lib/tcl${TCL_VER}/sqlite${PORTVERSION}/libsqlite${PORTVERSION}.so
 .endif
 
 post-install-TCL-on:
 	${INSTALL_PROGRAM} ${WRKSRC}/sqlite3_analyzer ${STAGEDIR}${PREFIX}/bin
 	${MKDIR} ${STAGEDIR}${PREFIX}/share/man/mann
 .if ${PORT_OPTIONS:MEXAMPLES}
 	${MKDIR} ${STAGEDIR}${EXAMPLESDIR}
 	${INSTALL_SCRIPT} ${WRKDIR}/${SUB_FILES} ${WRKSRC}/contrib/sqlitecon.tcl ${STAGEDIR}${EXAMPLESDIR}
 .endif
 
 pre-test:
 .if ! ${PORT_OPTIONS:MTCL}
 	@${ECHO_MSG} "===>  Option TCL must be On for test purposes" && ${FALSE}
 .endif
 
 .include <bsd.port.mk>
diff --git a/databases/trilogy/Makefile b/databases/trilogy/Makefile
index 715176677760..3bdad9c16099 100644
--- a/databases/trilogy/Makefile
+++ b/databases/trilogy/Makefile
@@ -1,24 +1,26 @@
 PORTNAME=	trilogy
 PORTVERSION=	2.12.5
 DISTVERSIONPREFIX=	v
 CATEGORIES=	databases
 
 MAINTAINER=	sunpoet@FreeBSD.org
 COMMENT=	Client library for MySQL-compatible database servers
 WWW=		https://github.com/trilogy-libraries/trilogy
 
 LICENSE=	MIT
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
-USES=		gmake ssl
+USES=		cpe gmake ssl
 
 USE_GITHUB=	yes
 GH_ACCOUNT=	trilogy-libraries
 
+CPE_VENDOR=	${PORTNAME}_project
+
 do-install:
 	${INSTALL_PROGRAM} ${WRKSRC}/example/trilogy_query ${STAGEDIR}${PREFIX}/bin/
 	cd ${WRKSRC}/inc/ && ${COPYTREE_SHARE} . ${STAGEDIR}${PREFIX}/include/
 	${INSTALL_DATA} ${WRKSRC}/libtrilogy.a ${STAGEDIR}${PREFIX}/lib/
 	${INSTALL_LIB} ${WRKSRC}/libtrilogy.so ${STAGEDIR}${PREFIX}/lib/
 
 .include <bsd.port.mk>
diff --git a/databases/valkey/Makefile b/databases/valkey/Makefile
index 57bed717ffff..f1d741343843 100644
--- a/databases/valkey/Makefile
+++ b/databases/valkey/Makefile
@@ -1,72 +1,74 @@
 PORTNAME=	valkey
 DISTVERSION=	9.1.0
 CATEGORIES=	databases
 
 MAINTAINER=	bofh@freebsd.org
 COMMENT=	High-performance data structure server that primarily serves key/value workloads
 WWW=		https://valkey.io/
 
 LICENSE=	BSD3CLAUSE
 LICENSE_FILE=	${WRKSRC}/COPYING
 
-USES=		gmake pkgconfig tcl:test
+USES=		cpe gmake pkgconfig tcl:test
 USE_GITHUB=	yes
 GH_ACCOUNT=	valkey-io
 USE_RC_SUBR=	valkey valkeysentinel
 
 MAKE_ENV=	OPTIMIZATION= \
 		V=1
 
 LDFLAGS+=	-lpthread -lm -lexecinfo
 
 SUB_FILES=	pkg-message
 SUB_LIST+=	PORTNAME=${PORTNAME} \
 		VALKEY_DBDIR=${VALKEY_DBDIR} \
 		VALKEY_LOGDIR=${VALKEY_LOGDIR} \
 		VALKEY_RUNDIR=${VALKEY_RUNDIR} \
 		VALKEY_USER=${USERS}
 
 USERS=		valkey
 GROUPS=		valkey
 
 PLIST_SUB+=	VALKEY_DBDIR=${VALKEY_DBDIR} \
 		VALKEY_GROUP=${GROUPS} \
 		VALKEY_LOGDIR=${VALKEY_LOGDIR} \
 		VALKEY_RUNDIR=${VALKEY_RUNDIR} \
 		VALKEY_USER=${USERS}
 
 OPTIONS_DEFINE=		JEMALLOC TLS
 OPTIONS_DEFAULT=	TLS
 OPTIONS_SUB=		yes
 
 JEMALLOC_DESC=	Use jemalloc
 TLS_DESC=	Use TLS
 
 JEMALLOC_MAKE_ENV=	MALLOC=jemalloc
 TLS_USES=		ssl
 TLS_MAKE_ENV=		BUILD_TLS=yes
 
 VALKEY_DBDIR?=	/var/db/valkey
 VALKEY_RUNDIR?=	/var/run/valkey
 VALKEY_LOGDIR?=	/var/log/valkey
 
+CPE_VENDOR=	lfprojects
+
 post-build:
 	${SED} ${SUB_LIST:S/$/!g/:S/^/ -e s!%%/:S/=/%%!/} \
 		${WRKSRC}/valkey.conf > ${WRKDIR}/valkey.conf
 	${SED} ${SUB_LIST:S/$/!g/:S/^/ -e s!%%/:S/=/%%!/} \
 		${WRKSRC}/sentinel.conf > ${WRKDIR}/valkey-sentinel.conf
 
 post-install:
 	${INSTALL_DATA} ${WRKDIR}/valkey.conf ${STAGEDIR}${PREFIX}/etc/valkey.conf.sample
 	${INSTALL_DATA} ${WRKDIR}/valkey-sentinel.conf ${STAGEDIR}${PREFIX}/etc/valkey-sentinel.conf.sample
 	${MKDIR} ${STAGEDIR}${VALKEY_LOGDIR} \
 		${STAGEDIR}${VALKEY_DBDIR} \
 		${STAGEDIR}${VALKEY_RUNDIR}
 	${STRIP_CMD} ${STAGEDIR}${PREFIX}/bin/valkey-benchmark
 	${STRIP_CMD} ${STAGEDIR}${PREFIX}/bin/valkey-cli
 	${STRIP_CMD} ${STAGEDIR}${PREFIX}/bin/valkey-server
 
 do-test:
 	@cd ${WRKSRC} && ${TCLSH} tests/test_helper.tcl
 
 .include <bsd.port.mk>
diff --git a/databases/weaviate/Makefile b/databases/weaviate/Makefile
index 001640940033..6f4ca351d4b2 100644
--- a/databases/weaviate/Makefile
+++ b/databases/weaviate/Makefile
@@ -1,27 +1,27 @@
 PORTNAME=	weaviate
 DISTVERSIONPREFIX=	v
 DISTVERSION=	1.37.6
 CATEGORIES=	databases # machine-learning
 
 MAINTAINER=	yuri@FreeBSD.org
 COMMENT=	Vector database that stores both objects and vectors
 WWW=		https://weaviate.io/ \
 		https://github.com/weaviate/weaviate
 
 LICENSE=	BSD3CLAUSE
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 # https://github.com/weaviate/weaviate/issues/9692
 NOT_FOR_ARCHS=	armv7 i386 powerpc
 NOT_FOR_ARCHS_REASON=	port seems to not support 32 bit platforms
 
-USES=		go:1.26,modules
+USES=		cpe go:1.26,modules
 
 GO_MODULE=	github.com/weaviate/weaviate
 GO_TARGET=	./cmd/weaviate-server
 
 PLIST_FILES=	bin/${PORTNAME}-server
 
 # how to start: https://docs.weaviate.io/deploy/installation-guides/docker-installation#run-weaviate-with-default-settings
 
 .include <bsd.port.mk>
diff --git a/databases/xapian-core/Makefile b/databases/xapian-core/Makefile
index f9bb940d0b96..46bb55e37847 100644
--- a/databases/xapian-core/Makefile
+++ b/databases/xapian-core/Makefile
@@ -1,35 +1,37 @@
 PORTNAME=	xapian-core
 PORTVERSION=	2.0.0
 PORTEPOCH=	1
 CATEGORIES=	databases
 MASTER_SITES=	https://oligarchy.co.uk/xapian/${PORTVERSION}/ \
 		LOCAL/sunpoet
 
 MAINTAINER=	sunpoet@FreeBSD.org
 COMMENT=	Probabilistic text search database engine
 WWW=		https://xapian.org/
 
 LICENSE=	GPLv2
 LICENSE_FILE=	${WRKSRC}/COPYING
 
-USES=		compiler:c++17-lang libtool tar:xz
+USES=		compiler:c++17-lang cpe libtool tar:xz
 
 CONFIGURE_ARGS=	ac_cv_func_snprintf=snprintf
 GNU_CONFIGURE=	yes
 INSTALL_TARGET=	install-strip
 USE_CXXSTD=	c++17
 USE_LDCONFIG=	yes
 
 CONFLICTS_INSTALL=	xapian-core14
 
 PORTSCOUT=	limitw:1,even
 
 OPTIONS_DEFINE=	DOCS SSE2
 SSE2_DESC=	Use SSE2 for floating point
 
 SSE2_CONFIGURE_ENABLE=	sse
 
+CPE_VENDOR=	xapian
+
 post-install:
 	${INSTALL_PROGRAM} ${WRKSRC}/bin/xapian-inspect ${STAGEDIR}${PREFIX}/bin/xapian-inspect
 
 .include <bsd.port.mk>
diff --git a/databases/xapian-core14/Makefile b/databases/xapian-core14/Makefile
index 492659126463..56ccd9a1f51a 100644
--- a/databases/xapian-core14/Makefile
+++ b/databases/xapian-core14/Makefile
@@ -1,35 +1,37 @@
 PORTNAME=	xapian-core
 PORTVERSION=	1.4.31
 CATEGORIES=	databases
 MASTER_SITES=	https://oligarchy.co.uk/xapian/${PORTVERSION}/ \
 		LOCAL/sunpoet
 PKGNAMESUFFIX=	14
 
 MAINTAINER=	sunpoet@FreeBSD.org
 COMMENT=	Probabilistic text search database engine
 WWW=		https://xapian.org/
 
 LICENSE=	GPLv2
 LICENSE_FILE=	${WRKSRC}/COPYING
 
-USES=		compiler:c++11-lang libtool tar:xz
+USES=		compiler:c++11-lang cpe libtool tar:xz
 
 CONFIGURE_ARGS=	ac_cv_func_snprintf=snprintf
 GNU_CONFIGURE=	yes
 INSTALL_TARGET=	install-strip
 USE_CXXSTD=	c++11
 USE_LDCONFIG=	yes
 
 CONFLICTS_INSTALL=	xapian-core
 
 PORTSCOUT=	limit:^1\.4\.
 
 OPTIONS_DEFINE=	DOCS SSE2
 SSE2_DESC=	Use SSE2 for floating point
 
 SSE2_CONFIGURE_ENABLE=	sse
 
+CPE_VENDOR=	xapian
+
 post-install:
 	${INSTALL_PROGRAM} ${WRKSRC}/bin/xapian-inspect ${STAGEDIR}${PREFIX}/bin/xapian-inspect
 
 .include <bsd.port.mk>