Software Bill of Materials in CycloneDX 1.6 and SPDX 2.3

commits