5566c602b90a266833794b49837bc76ee510ad72d3887ec444256359c7ef0fb9  sbom-spdx.json