Importance of snippet matching for software provenance analysisIs snippet matching worth the resources involved for FOSS compliance?