github.com/google/osv-scalibr@v0.4.1/guidedremediation/testdata/maven/patchchoice (about) pom.xml result.json want.pom.xml