(DIR) non-oss
 (DIR) oss
 (TXT) oss.cdx.json
 (TXT) oss.spdx.json