Secure Composition Analysis Group 2022 Product Manager Thoughts