https://vulert.com/blog/leveraging-sbom-to-enhance-security-in-javascript/