b25e45afd051108b875c8d8b9abc5cae18e3e442af1efc9216f5cb49fa3609ed  sbom-spdx.json