SCA is a process in which all open-source components and their dependencies are checked against a database of known packages with vulnerabilities and their versions. Keeping such a close eye on our collection of open-source packages is guaranteed to substantially reduce the risks of introducing vulnerabilities through open source packages.