github.com/anchore/syft@v1.38.2/syft/format/internal (about) backfill.go backfill_test.go cyclonedxutil location_sorter.go spdxutil stream testutil