Text this: Preserving Privacy in Software Composition Analysis