Why Open Source Risks Are Larger Than Only Software Composition Analysis | Hacker News Reader