free and open source software license and originpackage and dependencies licensing and originpackage vulnerabilities and securitycode scan and matchingcode analysis and spdxpackage managerslicense-scanoss licensingcopyrightlicense compliancemachine learningsoftware analysisapplication securitydependenciessoftware composition analysissoftware packagesscanningvulnerabilitiesSoftwareCompositionAnalysisLicenseSBOM