cyclonedx::v1_4 advisory bom commit component composition contact copyright data dependency evidence external-reference hash issue license metadata organization patch pedigree property rating release-note service source supplier text tool vulnerability with-advisories<A> with-ancestors<A> with-authors<T> with-commits<C> with-components<C> with-composition<C> with-contact<C> with-copyright<C> with-data<D> with-dependencies<D> with-descendants<D> with-evidence<E> with-external-references<E> with-hashes<H> with-individuals<I> with-licenses<L> with-metadata<M> with-notes<N> with-organizations<O> with-patches<P> with-pedigree<P> with-properties<P> with-ratings<R> with-release-notes<R> with-services<S> with-supplier<S> with-tools<T> with-variants<V> with-vulnerabilities<V>