https://vulert.com/blog/how-sca-enhance-security-and-mitigate-open-source-risks/