Tagged software-composition-analysis