Runtime-aware SCA — proves which CVEs are actually reachable, not just installed. - View it on GitHub