A municipal fee calculator ships with dozens of open-source packages. Which control specifically finds known-vulnerable third-party components?
Select an answer to reveal the explanation.
Short Explanation
Your fee calculator might be mostly other people's code glued together. SCA is the ingredients check that spots known-bad libraries before they bill the wrong citizen—or worse. Open-source speed is fine; blind trust is not.
Full Explanation
Software composition analysis inventories third-party and open-source components, including transitive dependencies, and maps them to known vulnerabilities and sometimes license obligations. SCA is essential where municipal applications reuse packages at scale. It addresses supply-chain risk distinct from flaws in first-party source.