What Is Software Composition Analysis Sca How Sca Scans Open Source Code