github.com/anchore/syft@v1.38.2/syft/format/spdxjson/test-fixtures/spdx/bad/bad-sbom (about) 1 bogus!