github.com/google/osv-scalibr@v0.4.1/extractor/standalone/windows/common (about) metadata purl winproducts