Contributed a review of Sonatype Lifecycle: If new libraries need to be used, we can scan them to see if they are secure or valid