Funnily enough for openfaas/faas - only the Google product showed dependencies. Both different tools also showed different "dependents"

If the exercise is to capture / mediate GPL2/3 dependencies, then having results missing kind of defeats the purpose.