https://vulert.com/blog/understanding-sca-a-comprehensive-guide-to-software-composition-analysis/