A Look at Software Composition Analysis. It’s time to ignore most of dependency alerts.