16Haz
Does Software Composition Analysis scan the source code or environment?
Do all SCA scanners work the same? Do they scan the source or the environment? I've seen some SCA that can scan a folder but also python safety just checks pypi. If both, what are advantages/disadvantages of each?
