component governance