github.com/google/osv-scalibr@v0.4.1/binary/spdx/testdata (about) json-format.spdx.json tag-value-format.spdx yaml-format