Does OAS automatically scan a project or does it expect people to manually insert each required plugin and its version?