Software Composition Analysis (SCA) is an automated process that identifies the open source software in a codebase and evaluates risk, security, compliance and code quality. 

If you have web applications, conducting an one-time or continuous software composition analysis can identify and protect you from vulnerabilities in external components such as open source software and commercial libraries. These external components are generally leveraged by software developers to bring more capabilities to the market quicker. But they are common attack vectors for cyber criminals.