https://vulert.com/blog/best-practices-for-conducting-effective-software-composition-analysis/