Flyingduck Software Composition Analysis vs HERCULES SecSAM (2026)