https://github.com/nexB/vulnerablecode/pull/632#discussion_r823700889
#632 (comment)