OPSWAT MetaDefender Software Supply Chain vs XBOM (2026)