Software composition analysis (SCA) tools are used for finding vulnerabilities in open source packages & secure your code. Use these best practices as a guide when using SCA tools.