$ 0 0 Sophos doesn't publish a list for public consumption. This thread disagrees on what open source components are used? I'm a bit confused by that.