What are the top Software Composition Analysis (SCA) tools used to identify vulnerabilities and licensing risks in open-source dependencies, and how do they compare in terms of dependency scanning, risk prioritization, remediation, automation, CI/CD integration, reporting, and scalability?
