This has been started and would need some help to be completed. See https://github.com/nexB/vulnerablecode/pull/391 and https://github.com/nexB/vulnerablecode/pull/374
