Exceptions and Risk Acceptance for Dependency VulnerabilitiesSpecifics of exception management in the context of SCA/CVE findings