See https://github.com/nexB/vulnerablecode/pull/467#discussion_r650844067
See #467 (comment)