• VSI: paths.only and path globs now apply to --detect-vendored. (#1812)
• Go: fossa analyze can now report dependencies from the module list embedded in compiled Go binaries (Go >= 1.18), for Go code shipped with no go.mod. Opt in with --enable-go-binary-analysis; add --unpack-archives to reach binaries inside archives such as an AAR. (#1757)