Inspect CycloneDX or SPDX JSON documents to list software components, versions, licenses, and missing metadata before sharing.