Hi Sean,

Thanks for your feature request. I would like to understand the feature request better. What exactly you would like to achieve with this ? Do you want this for visibility or for enforcing some kind of policies ?

How do you detect all the open-source components used in your software today ? Do you've a way to enforce any open-source governance policies ? If yes, what tools are you using today ?

Best, Kapil