Remove openssl from sfsclient cgmanifest by florelis · Pull Request #5775 · microsoft/winget-cli
Component Governance is reporting issues from openssl. The alert is caused by it being in the cgmanifest.json of sfs-client even though they don't use it on Windows. Since it is not actually used, we can't do something like overriding the version (and even if we did, CG would also pick the version in the json).
Removing it from their cgmanifest should get rid of the alert, although it will cause issues the next time we update the subtree.