reports smaller snippets with DISABLE_BEST_MATCH

adds purl@version dependency check

adds scan hash

improves false positive filter

implements hybrid vulnerability search

improves match accuracy

adds download_url and project urls

adds decryption, deprecates popularity table

adds status field and flag 512