add security related packages categorization to comps?