github.com/CycloneDX/sbom-utility@v0.16.0/test (about) config custom cyclonedx diff hash normalize patch policy spdx stats trim validation vex