FossID Software Composition Analysis vs Sonatype SBOM Manager (2026)