Hidden Dependencies and Component Variants in SBOM-Based Software Composition Analysis. - Shawn Rasheed; Max McPhee; Lisa Patterson; Stephen MacDonell; Jens Dietrich 001 (CoRR, 2026)