updated definition of software statement, added security considerations on software statement not being a full identifier