https://www.immuniweb.com/resources/what-is-software-composition-analysis/