CPE syntax can be useful, but some fields are difficult to guess for automation, like the vendor name. So therefore each project should provide the most detailled data possible.
As there seems to be no standard currently, I decided my self to provide a file named VERSION.cpe in the root project folder from now on. First example will be:
which gives back that single line:
cpe:2.3:a:kretschmann:bintra:1.4.27:*:*:*:*:*:*:*