See, e.g., https://github.com/nexB/vulnerablecode/pull/1042#discussion_r1088356657
See, e.g., #1042 (comment)