github.com/google/osv-scalibr@v0.4.1/guidedremediation/internal/manifest (about) manifest.go maven npm python