Veracode SCA scans open source dependencies for known vulnerabilities and makes recommendations on version updating.