Robert

**Describe the bug** The dependency graph gathered from `load_sbom` does not accurately represent what is contained within the SBOM. If a package is both a direct dependency and transitive dependency...