Always thought collecting BOMs for your apps to get alerted whenever a CVE >x dependency got pulled into your infrastructure was enterprise-level security theatre but considering the new reality, it m...