See https://github.com/nexB/vulnerablecode/pull/812 @TG1999 can you further elaborate on this?