gentoo-overlay/app-admin/sagan-rules/metadata.xml

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
<pkgmetadata>
	<!-- maintainer-needed -->
	<use>
		<flag name="lognorm">Install normalize rules support with <pkg>dev-libs/liblognorm</pkg></flag>
	</use>
	<upstream>
		<remote-id type="github">quadrantsec/sagan-rules</remote-id>
	</upstream>
</pkgmetadata>