1. A method for classification and policy management for software components, the method comprising: identifying a metadata associated with a component; determining, to form a mapping determination, whether the metadata maps to a classification in a set of classifications; assigning, if the mapping determination is true, the component to the classification; and associating with the component, a policy associated with the classification.