https://123dok.net/document/qvlglrkl-secure-composition-of-insecure-components.html