github.com/google/osv-scalibr@v0.4.1/extractor/filesystem/sbom/spdx/purl (about) purl.go purl_test.go