See comment on https://github.com/nexB/vulnerablecode/pull/480#issuecomment-864619856
See comment on #480 (comment)