github.com/CycloneDX/sbom-utility@v0.16.0/test/cyclonedx/1.6 (about) cdx-1-6-min-required.json cdx-1-6-valid-cbom-full-1.6.json cdx-1-6-valid-mlbom-environmental-considerations.json specification