github.com/CycloneDX/sbom-utility@v0.16.0/examples/cyclonedx/OBOM/Example-1-Decoupled (about) bom.json obom.json