Handling multiple versions of same component

[anthonyharrison]

If multiple versions of a component are included, the comparison is based on the order of the components. This can result in reported differences even if the same versions of the components are included in the two SBOMs but in different order.