module github.com/ssor/bom