github.com/nextlinux/gosbom@v0.81.1-0.20230627115839-1ff50c281391/schema (about) cyclonedx json spdx-json