We have no moat, and neither does open source
scottgoci.com
scottgoci.com
An enterprise gets license scanning as a feature within a larger product, several examples already exist
In this sense, I applied the "moat" more to mean "best at what it does / what the library tries to accomplish".