[TRACKING] Complete support for CycloneDX v1.7 #903
Description
see https://github.com/CycloneDX/specification/releases/tag/1.7
The following items are not currently supported for CycloneDX v1.7 (as of release 11.4.x):
- external components
- multiple SPDX License Expressions alongside with other licenses
- license expression details and properties
- expressing BOM distribution constraints with the Traffic Light Protocol (TLP) in metadata
- representing patent information
- properties on external-references
- citations
- detailing cryptographic transparency information
- to be continued
this library is a community effort.
if you find a feature that you need is missing, feel free to donate/contribute the missing feature.